Colleen leads the TPRM software team in the development of software products/tools for third party risk assurance. Colleen has over 20 years of experience within the financial services industry and consulting. She has led programs associated with risk management, procurement/contract negotiation, mergers and acquisitions, and business process reengineering. She has regulatory and global experience executing portfolios to meet the corporate strategy.

Innovative, Data Governance, Privacy & Security Leader | Writer | Speaker and Shared Assessments Data Governance Committee Chair

Nathan Hickey, CISM is an experienced cybersecurity professional specializing in Third Party Risk Management (TPRM) for KPMG's Cyber Security Practice where he has delivered a broad range of TPRM services to clients across several industries. Nathan is also responsible for helping write the latest version of the Shared Assessment SIG's Artificial Intelligence controls. Based out of Atlanta, GA, Nathan brings enthusiasm, dedication, and a wealth of industry insights to help businesses stay ahead of the curve in the ever-evolving domain of cybersecurity.

Rhonda K.R. Cook is retired Chief Risk Officer for SEI Investments in Oaks, PA. She also served 4 years as Chair of the Investment Company Institute’s (ICI’s) Chief Risk Officer Committee. Over the course of her 25 years at SEI, Rhonda worked in a variety of client service, solution development, and risk management roles. She led projects in SEI’s Hong Kong and London offices, and she spent three years in New Delhi as SEI’s first Unit Leader, India. Rhonda has an M.B.A. from Northeastern University with a dual concentration in International Management and Innovation Entrepreneurship. Prior to joining SEI Investments, Rhonda graduated from the United States Military Academy at West Point; she served nine years as a Military Intelligence Officer in the U.S. Army, including multiple duty assignments in Europe, the Middle East, and Asia.

Elizabeth Dunsmoor recently joined Shared Assessments as a TPRM Principal after 15 years as a TPRM practitioner. She has experience designing holistic programs and delivering assessment work within the cybersecurity, financial services, manufacturing, and healthcare sectors. With a proven ability to oversee and execute long-term operational strategies and methodologies for risk programs, Elizabeth is proficient in a variety of management actions including translating strategies into measurable plans, partnering with Procurement, corporate teams, and firm leaders to develop a pipeline of cross-functional leaders within the risk management function. She now provides training and guidance to business leaders to ensure understanding of program requirements, third-party capabilities, and performance expectations.

Jennifer Hancock is a third-party risk management professional with more than 20 years of experience in third-party risk management. As owner of Hancock Consulting LLC, a consultancy she founded to provide specialized advisory services, Ms. Hancock has been able to help organizations develop effective third-party risk management strategies and improve their overall resilience. Her expertise has been sought after by a wide range of clients across industries, and she is dedicated to helping organizations of all sizes manage their third-party risks effectively. As a thought leader in the field of third-party risk management, Ms. Hancock has been a featured speaker at numerous industry events and conferences. She is both a Certified Third-Party Risk Professional and Certified Third-Party Risk Assessor (CTPRA).

Chris is a Senior Advisor to Shared Assessments where he focuses on healthcare, financial services, and emerging technologies. He has more than 25 years of experience helping clients effectively manage risk while exhibiting a passionate and dynamic leadership style. Prior to joining Shared Assessments, Chris led third party risk management and information technology initiatives at Bristol Myers Squibb, Bank of America, Merrill Lynch, KPMG, and Marriott International.

Andrew is the CEO of Shared Assessments, a global membership organization that supports hundreds of companies, risk programs, and thousands of associated third-party and other risk professionals. As a risk practitioner and executive, he has driven a culture of accountability and diligence in safeguarding information and other assets for organizations and their third parties. He has more than 25 years of experience in risk management and information security.

Colleen leads the TPRM software team in the development of software products/tools for third party risk assurance. Colleen has over 20 years of experience within the financial services industry and consulting. She has led programs associated with risk management, procurement/contract negotiation, mergers and acquisitions, and business process reengineering. She has regulatory and global experience executing portfolios to meet the corporate strategy.

Elizabeth Dunsmoor recently joined Shared Assessments as a TPRM Principal after 15 years as a TPRM practitioner. She has experience designing holistic programs and delivering assessment work within the cybersecurity, financial services, manufacturing, and healthcare sectors. With a proven ability to oversee and execute long-term operational strategies and methodologies for risk programs, Elizabeth is proficient in a variety of management actions including translating strategies into measurable plans, partnering with Procurement, corporate teams, and firm leaders to develop a pipeline of cross-functional leaders within the risk management function. She now provides training and guidance to business leaders to ensure understanding of program requirements, third-party capabilities, and performance expectations.

Rhonda K.R. Cook is retired Chief Risk Officer for SEI Investments in Oaks, PA. She also served 4 years as Chair of the Investment Company Institute’s (ICI’s) Chief Risk Officer Committee. Over the course of her 25 years at SEI, Rhonda worked in a variety of client service, solution development, and risk management roles. She led projects in SEI’s Hong Kong and London offices, and she spent three years in New Delhi as SEI’s first Unit Leader, India. Rhonda has an M.B.A. from Northeastern University with a dual concentration in International Management and Innovation Entrepreneurship. Prior to joining SEI Investments, Rhonda graduated from the United States Military Academy at West Point; she served nine years as a Military Intelligence Officer in the U.S. Army, including multiple duty assignments in Europe, the Middle East, and Asia.

Marya Roddis is a senior technical and grant writer providing high quality business, communications, management, design and education support services to public and private, for-profit and non-profit organizations and agencies. She is the former VP of Technical Writing for Shared Assessments and has served in administrative, technical, and teaching capacities in varied settings including University of Alaska Institute of Northern Forestry and the Medical Identity Fraud Alliance.

Vendor Risk Manager for Global Federal Credit Union and Co-Chair of the Shared Assessments Global TPRM Best Practices Committee.

Senior Manager, Technology Risk Management & Controls, Ontario Teachers’ Pension Plan Board and member of the Shared Assessments Global TPRM Best Practices Committee.

Marc Weinberg is VP, Vendor Risk Management at Commerzbank AG, New York Branch. His experience includes Sarbanes-Oxley compliance, systems implementation, information security, and vendor management. He holds CTPRP, CTPRA, and Open FAIRTM certifications, among others. He earned his bachelor’s in Accounting at Binghamton University, and his MBA in Finance at CUNY Baruch College

Charlie Miller is a frequent speaker and a recognized expert in third-party risk. His key responsibilities include expanding the Shared Assessments Third-Party Risk Management membership-driven program, facilitating thought leadership, industry vertical strategy groups, continuous monitoring / operational technology working groups, and loT research studies.

Konstantinos is the Director of Quantum Computing Services at Protiviti, where he and his team help companies get ready for quantum opportunities and threats. He has been involved in the quantum computing industry since 2012, and in InfoSec since the 90s. Konstantinos is a frequent speaker at RSA, Black Hat, Defcon, and dozens of conferences worldwide. He also hosts The Post-Quantum World podcast.

Andrew is the CEO of Shared Assessments, a global membership organization that supports hundreds of companies, risk programs, and thousands of associated third-party and other risk professionals. As a risk practitioner and executive, he has driven a culture of accountability and diligence in safeguarding information and other assets for organizations and their third parties. He has more than 25 years of experience in risk management and information security.

Prior to joining Shared Assessments in 2022, Andrew served as Senior Vice President, Vendor Risk Management at Blackstone for four years, where he led a team of risk professionals responsible for overseeing all phases of the vendor lifecycle at the firm. Prior to Blackstone, he worked at BlackRock from 2010-18, where he first joined and then eventually led the firm’s Vendor Risk Management team. Before that, Andrew worked at Citigroup nine years, finishing as a Senior Vice President and Business Information Security Officer in Global Fixed Income, leading onsite third-party risk assessments across the United States, Europe, and Asia.

Hilary leads the advancement and promotion of third-party risk management best practices and solutions through thought leadership, subject matter expertise, and support for Venminder’s customers, Marketing, Sales, and Third-Party Risk divisions. Hilary has served as a senior leader for over 20 years, working in operations management, and risk management roles, with an emphasis on third-party risk. Hilary successfully built, improved, and managed enterprise-wide third-party risk management frameworks and programs for leading financial services companies. She has designed and developed training materials, reference guides, desk-top procedures, job aids, checklists, and templates for a full spectrum of learning environments and learners as well as personally trained hundreds of third-party risk managers, vendor relationship managers, and vendors.

John Beattie has been a Principal Consultant within 11:11 Systems for more than 15 years where he has consulted with organizations looking to reduce operational risk by maturing their business continuity, disaster and data recovery, and crisis management programs. He currently leads 11:11 Systems’ cyber-compromised data recovery consulting team. Prior to joining 11:11 Systems, John was the Global Director of Business Continuity for News Corporation and an IT management consultant at Ernst & Young for more than 15 years. John has attained FBCI certification from the Business Continuity Institute and he is a Certified Third-Party Risk Professional.

Mark Orsi is the Chief Executive Officer of Global Resilience Federation (https://www.grf.org/), a non-profit with the mission to develop and support threat intelligence and information sharing communities including education, operations technology, financial services, retail and hospitality, legal and professional services, energy, health, and oil and natural gas. Mr. Orsi led strategic efforts for several prominent Fortune 100 companies, working directly with CIOs and CISOs to develop, deploy, and improve security controls protecting the confidentiality, integrity, and availability of sensitive information. Mark joined the company from JPMorgan Chase where he served as executive director and product owner for cybersecurity and technology controls. Prior to JPMorgan, Mr. Orsi served KPMG as director of cybersecurity, and Goldman Sachs as vice president of technology risk. Mark holds an MBA from Columbia Business School, an MS in computer science from Johns Hopkins University, and a BS in Aerospace Engineering from the University of Maryland.

Marya Roddis is a senior technical and grant writer providing high quality business, communications, management, design and education support services to public and private, for-profit and non-profit organizations and agencies. She is the former VP of Technical Writing for Shared Assessments and has served in administrative, technical, and teaching capacities in varied settings including University of Alaska Institute of Northern Forestry and the Medical Identity Fraud Alliance.

Bob is deeply committed to contributing to the well-being of the financial services community. A well-known and sought-after expert in risk management strategy, he has 50 years of experience leading fraud risk management and risk management strategy. In addition to bringing unique experience as a consultant, educator and expert witness to Shared Assessments, he also serves as the principal of RW Jones Associates, LLC and is Adjunct Professor Emeritus of Economic crime at Utica College, where he taught in the school’s M.B.A. in Economic Crime and Fraud Management program. His articles have appeared in the RMA Journal and the Journal of Economic Crime Management.

Martin is a dedicated Information Security Professional with 20 years’ experience and is passionate about his subject matter. He specializes in implementing Cyber Security / Information Security frameworks and has previously worked in both the Fast-Moving Consumer Goods and Fintech industries.

Jennifer Hancock is a third-party risk management professional with more than 20 years of experience in third-party risk management. As owner of Hancock Consulting LLC, a consultancy she founded to provide specialized advisory services, Ms. Hancock has been able to help organizations develop effective third-party risk management strategies and improve their overall resilience. Her expertise has been sought after by a wide range of clients across industries, and she is dedicated to helping organizations of all sizes manage their third-party risks effectively As a thought leader in the field of third-party risk management, Ms. Hancock has been a featured speaker at numerous industry events and conferences. She is both a Certified Third-Party Risk Professional and Certified Third-Party Risk Assessor (CTPRA).

Gary Roboff is a Senior Advisor to Shared Assessments where he focuses on payments, risk management, mobile financial services, and information management. Gary has almost four decades of experience in financial services planning and management, including 25 years at JP Morgan Chase where he retired as Senior Vice President of Electronic Commerce. Gary has worked extensively in electronic payments, payments fraud, third party risk management, privacy, and information utilization, as well as business frameworks and standards for electronic commerce applications.

Colleen leads the TPRM software team in the development of software products/tools for third party-risk assurance. Colleen has over 20 years of experience within the financial services industry and consulting. She has led programs associated with risk management, procurement/contract negotiation, mergers and acquisitions, and business process reengineering. She has regulatory and global experience executing portfolios to meet the corporate strategy.