Speakers

Úna Dillon, Regional Director Europe, PCI Security Standards Council
Úna Dillon is Regional Director Europe for the PCI Security Standards Council. She is 30 years in the payments industry and has held various roles including payments advisor to Financial Regulators, policy makers, standards bodies, and card schemes, influencing change globally. Advisor on the European Commission Payments Systems Market Expert Group, was on the Board... of EMVCo and she was Chair of the European Payments Council Card Fraud Prevention Expert Group for several years.more

Simon Turner, Head of Security Governance and Compliance, BT Group
A highly experienced technology and telco leader Simon brings three decades of industry experience to the forefront having worked in numerous highly regulated roles. Working with BT’s most complex customers Simon's background gives him valuable insights and practical experiences to support cybersecurity, compliance risk management, and governance decisions.

Jo Vane, InfoSec Compliance Director, Checkout.com
Jo Vane is the InfoSec Compliance Director at Checkout.com, known for her ability to simplify complex security matters. As a former police officer turned cybersecurity enthusiast, Jo is on a mission to continue to elevate Checkout.com's PCI programs both internally and externally.
With nearly fifteen years of leadership experience, Jo has a solid track record... of leading teams through transformative journeys. Her expertise spans a wide range of security standards and regulations, making her the go-to person for security and compliance discussions.
Jo has a unique talent for bridging the gap between tech and people. She's a strong communicator who can translate complex compliance topics into plain language that everyone can understand.
Her role at Checkout.com is pivotal in maturing the PCI program, particularly for DSS and 3DS. She's passionate about upholding the highest security standards for payment processing and is dedicated to making the digital world safer for everyone
more

Michelle Griffey, GRC Director, Paragon
Michelle is an experienced leader with 30 years’ experience across a wide range of disciplines including Risk and Governance, Lean Sigma, Project and Relationship Management. She places strong emphasis on doing what is right for the end customer, creating trust and so enabling business growth and resilience through a pragmatic approach to risk... mitigation. Starting her career in branch banking Michelle's experience includes EWRM, incident management, relationship & supplier management, regulated and non-regulated sales, people coaching and development, banking product and policy governance, implementing process improvement through the use of Six Sigma & LEAN methodologies, project management and business process development & governance. Michelle joined Communisis in 2016 to build a risk function for the Customer Experience division focussed on supporting clients within strongly regulated markets. She has subsequently moved to the role of CRO for Communisis group bringing together a number of specialist areas to create a team focussing on Business Resilience. more

Adaora Ezennia, GRC Lead, THG PLC
...Adaora Ezennia is the GRC Lead at THG PLC, a global e-commerce group operating through two leading consumer businesses: THG Beauty and THG Nutrition. A specialist in cybersecurity governance, compliance, and risk management with a Master’s in Cloud and Network Security and ISO 27001:2022 ISMS certification. Passionate about AI governance and privacy risk management.more

Katie Cowman, Senior PCI Assurance Manager, Barclaycard
Katie is the Senior PCI Assurance Manager at Barclaycard Payments where she leads the PCI Technical Standards compliance programme across the Payments business. Katie also provides SME consultancy in relation to Payments Security to the wider bank and consults on new products and initiatives ensuring that Payment Security requirements are built in by design. With... a complex career journey from fashion and teaching via cyber security to PCI compliance, Katie uses all her skills to help bring Payment Security to life for her colleagues and clients.’more

Muhammad Emal Khan, Senior Information Security Consultant, Lidl
Muhammad Emal Khan is a Senior Information Security Consultant at Lidl with over 16 years of experience in Governance, Risk, and Compliance (GRC), Information Security, Systems Auditing, and Process Improvement. He has a proven track record of developing and implementing robust security programs that align with organizational strategy and strengthen cyber resilience.... Throughout his career, Muhammad has led the successful implementation of PCI-DSS, ISO 27001, ISO 27701, and SOC 2 across multiple industries, including financial services and service providers, collaborating with teams across 5 continents and 14 countries. He also spearheaded the "Human Firewall" security awareness and training initiative, fostering a strong culture of security within organisations. Passionate about advancing IT governance policies and driving innovation in security programs, Muhammad focuses on reducing exposure, increasing awareness, and building resilient governance frameworks that enhance organisational defences.
more

Carol Lloyd, PCI Compliance Consultant, Stonegate Group
Carol is a highly experienced compliance professional having spent over 30 years in regulated environments and specialising in PCI DSS since 2012. She has successfully guided Stonegate Group through numerous PCI DSS assessments, transforming complex regulatory requirements into streamlined, business-as-usual processes. Carol’s approach minimises operational disruption... while ensuring robust protection of customer data. Her success is built on fostering strong relationships with internal teams, QSA partners, and acquirers, enabling smooth assessments and ongoing compliance. Dedicated, knowledgeable, and pragmatic, Carol ensures that Stonegate not only meets, but maintains the highest standards of PCI DSS compliance.more

Ronak Topiwala, Global Information Security GRC Lead, Checkout.com
Ronak has spent more than a decade traversing the evolving terrain of technology risk and information security, turning complex governance puzzles into clear, actionable frameworks. Now the Global Information Security GRC Lead at Checkout.com, he guides security strategy across a fast-moving global fintech landscape after several years shaping its GRC foundations.... His earlier chapter at EY—spanning New Zealand and the US—saw him manage technology risk engagements and lead external audit work across varied sectors. With strengths in enterprise risk management, ISMS design, and a wide constellation of security disciplines, Ronak helps organisations stay secure, resilient, and confidently aligned with the future.more

Parminder Lall, CEO and Founder, 1 Cyber Valley
Parminder Lall is CEO and Founder of 1 Cyber Valley. Having worked on PCI projects from the very first days of the standard’s existence, for British Airways, Parminder knows a thing of or two about the subject matter. Once time had passed and more experiences were gained in other industries, he joined the dark side in 2013 and became a PCI QSA. Not... content with just being a QSA, he decided to throw his own hat in the ring and start a QSA company himself in 2020. Welcome 1 Cyber Valley! Initiative, intuition and drive are only three of the many characteristics Parminder beholds that make 1 Cyber Valley as attractive as it is today. Starting up as a self-funded QSA company, to employing a dedicated team of consultants, 1 Cyber Valley has become a company that partners 150+ clients across the globe more

Simon Arazi, VP of Product, Reflectiz
Head of Products and Data Scientist. Experience in working with large companies, international environments (North America, Europe and APAC) and a variety of industries (Automotive, Mobility Staffing, Manufacturing, Medical Equipment, Telco’s, Utilities, Transportation, Manufacturing and more). Leading innovation and creativity in the company.

John Bartholomew, Senior VP, Strategic Relationships, SecurityMetrics
Since SecurityMetrics inception, John Bartholomew has worked with the world’s largest acquirers helping keep their merchants secure and compliant while accomplishing the acquirers’ business objectives. Starting as a COBOL programer with a degree from Brigham Young University, John Bartholomew has over 35 years' experience in the high tech field. Specialisations... include cyber security technology solutions for payments, healthcare, manufacturing and entertainment. His greatest work satisfaction comes from helping clients understand and enjoy the benefits of new or advanced technologies.more

Tim Ayling, VP EMEA Cyber Security Specialists, Thales
Tim Ayling currently serves as the VP EMEA Cyber Security Specialists at Thales. With over 25 years’ experience in the cybersecurity industry, Tim began his career in System Engineering. He began his leadership career when he established Entrust Inc. in Australia in 2003 and was made Vice-President Asia Pacific in 2006. Tim has held numerous leadership... roles in large cybersecurity vendors, including RSA Security, Imperva, Trend Micro, Kaspersky Labs and now Thales, as well as spending time in the cyber-security practice of KPMG. Tim holds an MSc in Secure E-Commerce and an MBA from the University of Warwick. more