Patrick Simonnet is a New York-based Managing Director and the Chief Audit Executive (CAE) of Bank of China for the USA.

Patrick has enjoyed a long career within banking and financial services. Prior to Bank of China, Patrick was the Global Head of Audit for Market Behavior & Conduct at Credit Suisse between 2014 and mid-2019. In this role, Patrick assumed global responsibility for the audit coverage of market conduct risk, including the related legal, compliance and regulatory programs and activities, including AML. He previously worked at JP. Morgan Chase in 2011-14, where he was an Executive Director within their Internal Audit department for the Investment Bank and their regulatory change program consecutively within the COO department. Originally from Paris, Patrick held a number of control and business roles with the Banque de France and the French Futures and Options Exchange and Clearing House (aka MATIF). Patrick also spent 14 years with Goldman Sachs in Paris, London, New York and Chicago, in various Operations, Finance, Technology, Management Controls and Internal Audit roles, ultimately leading the Americas regional Internal Audit program.

Patrick has been very familiar with 1st, 2nd and 3rd lines of defense matters since he has fulfilled responsibilities in a large number of different executive roles and covered related topics throughout his career at Goldman Sachs, JP Morgan Chase, Credit Suisse, globally, and Bank of China in the US.

Sakari Lehtinen has 25 years of experience in internal auditing and 35 years of experience in the financial sector. For the past 7 years, he has served as the Chief Audit Executive at the Finnish financial institution OP Pohjola. His particular interests include bold and objective auditing, continuous and efficient development of internal audit operations, and the utilization of technology in auditing. He is a member of the ECIIA Banking Committee and has served as a board member and chairman of the board of IIA Finland.

OP Pohjola is owned by its customers and is Finland’s largest provider of financial services. OP Pohjola is made up of over 40 OP cooperative banks and the central cooperative which they own, including its subsidiaries and affiliated entities. Over 2.1 million owner-customers own the OP cooperative banks and thereby the entire OP Pohjola with a staff of approximately 15,000. OP Pohjola's business consists of the following three business segments: Retail Banking (Banking for private and SME customers), Corporate Banking (Banking for corporate and institutional customers), and Insurance (Insurance customers).

Simon Turner is Head of Security Governance & Compliance at BT Group, where he leads global governance, risk, and compliance programmes spanning payment security, ISO/IEC 27001, telecommunications security, and wider regulatory frameworks. He is responsible for overseeing second-line assurance, certification strategy, control framework design, and compliance transformation across BT’s complex technology and payment environments.

With more than 30 years of experience across technology, cybersecurity, and telecommunications, Simon has developed deep expertise in payment security, large-scale assurance operating models, and the integration of security into digital transformation. His work focuses on helping organisations move beyond audit-driven approaches toward scalable, sustainable compliance built into architecture and operational design.

Simon represents BT on the PCI Security Standards Council Board of Advisors, where he collaborates with global merchants, service providers, payment brands, and assessors to shape the evolution of PCI standards and address emerging industry challenges. His areas of focus include AI-enabled assurance, automation of evidence and controls, modern contact centre payment technologies, and the changing role of assessors in continuous compliance models.

He is widely recognised for promoting a practical and strategic approach to compliance, often described as “compliance as a consequence,” where strong security design enables regulatory outcomes rather than reacting to them. Simon regularly speaks at industry conferences and community events on the future of compliance, third-party assurance, and operating model transformation.

Through his leadership, Simon continues to drive the modernisation of assurance practices, helping organisations balance innovation, regulatory expectations, and risk management in increasingly complex digital ecosystems.

With over two decades of experience across the Life Sciences and healthcare sectors, I am a global executive and strategic advisor dedicated to unlocking innovative potential within organizations and their broader ecosystems. My expertise lies at the intersection of visionary leadership, global health diplomacy, and complex negotiations, helping partners navigate the delicate balance between commercial ambition and policy-driven landscapes. I specialize in high-stakes, quick-moving projects that require maturity to identify emerging opportunities and systemic risks. Whether I am orchestrating global partnerships, ensuring rigorous commercial compliance, or applying strategic foresight to future-proof impacts, my focus remains on delivering high-value outcomes through award-winning, high-performance teams.

Samer Jannoun is an experienced Ethics and Compliance professional with a proven track record of developing and implementing compliance frameworks for large multinational companies. As the Head of Ethics & Compliance Special Oversight at Meta (formerly Facebook), he spearheads the development and implementation of compliance frameworks for emerging and high-risk initiative. With his background in forensic and dispute services at Deloitte, and experience in conducting Compliance & Ethics investigations at Oracle, Samer brings a unique perspective to his work. He is also a Certified Compliance & Ethics Professional International (CCEP-I) and a Fellow of the International Compliance Association (FICA).

Elena García Aguado is the Head of Compliance at RWE Renewables , where she leads the design and implementation of a comprehensive compliance management program for the Onshore and PV renewable energy sector. Her role includes advising on strategic compliance measures related to antitrust, corruption, money laundering, and international sanctions. Elena is a Spanish-qualified lawyer, with over 20 years of experience in the legal and compliance sectors in Spain, Belgium and Germany. She is fluent in Spanish, German, English, and French.

Ben is a Chartered Accountant who has worked in risk and control disciplines within large Financial Services businesses for almost 25 years. Roles have spanned the three lines of defence, as well as several years as an external reviewer. His current role is at Nationwide, where he has spent the last 9 years – with responsibilities centred around setting the risk framework; overseeing its application; and reporting on risk insights.

Kishan Majithia is a senior Cyber & Technology Risk executive specialising in Governance, Risk & Compliance (GRC) strategy and transformation within highly regulated global environments. He leads large-scale control and assurance functions, focusing on strengthening resilience, regulatory alignment, and measurable risk outcomes.

With deep expertise across frameworks including NIST CSF, NIST 800-53, ISO 27001, COBIT, CSA CCM and FAIR, Kishan is passionate about modernising GRC through automation, continuous monitoring, and data-driven assurance.

He holds multiple industry certifications including CISSP, CISM, CRISC, CISA, CCSP, CDPSE and PMP.

Janos Kuhn is the Global Head of Compliance and Business Integrity at VOIS, a Vodafone-owned entity operating across more than 30 international markets with 34,000 employees focused on digitalization and automation in technology and business processes. Appointed to this role in August 2025, he drives compliance strategies that leverage AI, analytics, and automation to address anti-bribery measures, third-party management, privacy, responsible AI, and global value chain integrity. With over 25 years of experience in fraud investigation, consulting, and in-house compliance across technology, energy, and engineering sectors in the UK, Nordics, Eastern Europe, and China, Mr. Kühn excels in transforming compliance through technology, including Agile automation and AI-powered ethics solutions. He has led multinational teams from Europe, the Americas, the Middle-East and Asia, bringing a proven track record of building effective compliance frameworks in complex global environments.

Before joining VOIS, Mr. Kühn served as Global Head of Customer & Third Party Compliance at Ericsson from March 2021 to September 2025, leading compliance efforts for customer, partner, and vendor relationships across all business areas during its regulatory monitorship. There, he oversaw Review Boards, embedded risk management into operations, led advanced data-driven initiatives such as dynamic risk assessments, and compliance technology upgrades and worked under 4 other monitorships including Siemens and SNC-Lavalin. Mr. Kühn was most recently appointed as a board member at a VOIS subsidiary in Hungary.

Thomas Barkias is a Team Lead at the European Central Bank (ECB), where he focuses on ICT and operational resilience of significant institutions under the Single Supervisory Mechanism. His work spans cyber risk, cloud and third‑party dependencies, digital transformation, and emerging technologies, with a strong emphasis on supervisory consistency. Thomas is closely involved in the implementation of the Digital Operational Resilience Act (DORA) and contributes to supervisory approaches on crypto‑assets, tokenisation, AI governance, and SupTech, as well as the evolving risk landscape linked to quantum computing. He supports various teams, helping translate technological developments into concrete supervisory expectations.

He regularly engages with policy counterparts and international stakeholders, and speaks at regulatory and industry forums on resilience, cyber security, and digital finance in the banking sector.

Keith Davies was appointed Group Chief Risk and Compliance Officer in September 2022, having previously been a Non Executive Director for two of Admiral’s underwriting entities.

Keith joined from Federated Hermes Limited where he had been Chief Risk & Compliance Officer since 2020. Prior to that, Keith was the Chief Risk and Resilience Officer for M&G, where he was a member of the Leadership Team that prepared the business for its de-merger from Prudential. He also had senior roles within the Prudential Group including Group-wide Head of Internal Audit CRO for the Prudential’s UK business. Keith has also worked in risk management and audit at Standard Chartered, Standard Bank and Deutsche Bank, and spent two years within the Policy team at the Financial Services Authority.

Keith has an Economics degree from Cambridge University and an MSc in Economics and Econometrics from the University of Bristol, and was a contributing author for the ESG Investing Handbook.

Neil Donnelly is Group Chief Compliance Officer at Allied Irish Banks (AIB), with responsibility for regulatory compliance, conduct risk, and compliance strategy across the Group. He works closely with senior management, Boards, and regulators on strengthening governance, embedding effective risk management, and responding to evolving regulatory expectations. Neil has a strong interest in the intersection of regulation, culture, and technology, including the role of data and AI in enhancing risk and compliance effectiveness. He is a regular contributor to industry forums on regulatory change and governance. A lawyer by background Neil was previously Chief Compliance Officer at M&G Investments and Global Head of Compliance at Pioneer Global Asset Management (Now Amundi).

Claudia Iacobucci is a recognized expert in internal controls, compliance, and risk management, with a proven track record across global and multinational organizations like Novartis and ABB. Claudia is known for embedding compliance into organizational culture, leading complex transformations, and delivering sustainable results in high-stakes environments.

Marta Luaces Calpe holds a degree in Economics and Business Administration, a Master’s in Economics and Financial Management, and is a Certified Internal Auditor.

She began her career in IT before joining Ernst & Young in External Audit.

Later, she moved to Winterthur, where she embarked on an international career in the insurance and financial sectors, occupying various responsibilities in Internal Audit, Quality, SOX and Fraud Management.

Marta conducted assignments across Europe and Asia and served as a SOX Advisor and Accounting Expert & Quality Auditor in Europe.

Following Winterthur’s integration into AXA in 2007, she was appointed Senior Audit Manager and Chief Fraud Officer. In 2013, she became Head of Audit for AXA’s Mediterranean and Latin American regions, overseeing audit operations across 29 countries.

Currently, she leads a diverse team of 200 auditors from over 20 nationalities in her role of Regional Head of Internal Audit at AXA Europe, Latin America, and Africa.

Marta has participated in Audit Committees in 30 countries of four continents and has contributed as a mentor, speaker, and author of articles and technical guides for many organizations, including the Institute of Internal Auditors of Spain, the European Confederation of Institutes of Internal Auditing (ECIIA), and the Global Leading Conferences (GLC).

She is also the author of two books: “Internal Audit at Your Fingertips” and “La Auditoría Interna a tu alcance”.

In the recent years at Norsk Hydro, my role as Director of Information Security Office has equipped me with a further robust expertise in cyber security, IT governance, risk, and compliance. Drawing on my ITIL certification and skills in manufacturing process improvement, I've been pivotal in elevating our cyber defense framework. My vision aligns with our company's mission to safeguard critical infrastructure, ensuring resilience against ever-evolving threats. Our team's dedication to strategic leadership and continuous improvement has significantly strengthened our cybersecurity posture, reflecting my commitment to excellence and proactive risk management.

Leticia is the Head of Internal Audit at the European Stability Mechanism since 2013. Leticia is also member of the Oversight Committee of the European Space Agency since 2022 and Internal Audit Committee member of the European Court of Auditors since 2025. She has more than 20 years’ experience in internal audit in public institutions as well as in the private financial sector. She holds an MBA from Warwick Business School and the CIA, CFSA, CISA and CFE certifications. She is a long term volunteer at the Institute of Internal Auditors in different capacities,

Jijo John is a seasoned professional in Governance, Risk, and Compliance (GRC) across the aviation and banking sectors. He currently serves as Senior GRC Analyst in Corporate Governance and Risk Management at dnata, part of the Emirates Group.

He brings diverse cross-industry experience spanning aviation, banking, and technology consulting, with hands-on expertise in risk management and Business Continuity Management (BCM) within banking environments, as well as IT governance aligned with NESA (UAE) and NIST frameworks. Since joining Emirates Group, Jijo has led the implementation and optimization of GRC platforms, strengthening safety, quality, operational risk, and compliance oversight across dnata’s global aviation solutions.

Jijo holds a Bachelor’s degree in Computer Science Engineering and certified by the OCEG as a GRCP and GRCA, reflecting his expertise in integrated risk, audit, and compliance frameworks.

An active contributor to the Middle East GRC community, Jijo regularly shares insights on GRC transformation, cybersecurity resilience, and the evolving role of AI in governance and risk strategy.

Michael Rasmussen is an internationally recognized thought leader and pioneer in governance, risk management, and compliance (GRC). With over 30 years of experience, he has extensive expertise in enterprise GRC strategy and processes supported by robust information and technology architectures. Known as the “Father of GRC,” Michael was the first to define and model the GRC market in February 2002 while at Forrester, setting the foundation for the modern understanding of GRC.

Manoj Kulwal is widely regarded as the world’s leading expert at the intersection of risk management and Generative AI. As an AI Mentor for second-line risk teams, he provides strategic guidance on harnessing the opportunities of Generative AI while effectively mitigating its associated risks.

With over 20 years of experience in risk & compliance management, Manoj has delivered frameworks, processes, and IT systems for leading financial services organisations. He has trained more than 1,000 professionals through classroom and online courses and played a pivotal role in key industry initiatives, including the development of the Certificate in Operational Risk Management by the Institute of Operational Risk (IOR) and the revision of the international risk management standard, ISO 31000.

Marc Levine joined MetricStream in April 2025 as Chief Executive Officer. Marc is a proven leader with over two decades of experience in enterprise SaaS, data, and analytics, including more than 10 years at Moody’s Analytics, where he led the Structured Finance division.

Marc has a track record of driving revenue acceleration, EBITDA expansion, and operational excellence in both public companies and privately held organizations. He has deep expertise in managing high-growth business units, optimizing cost structures, and executing strategic pivots to enhance enterprise value. With a strong background in SaaS workflow solutions tailored to reporting, compliance, accounting, and risk, Marc is skilled in value-based pricing, transitioning from one-time to recurring revenue models, and executing high-impact commercial strategies to expand market penetration. He has also led deal negotiations, due diligence, and seamless integration of acquired businesses to maximize synergies and drive shareholder returns. Marc's leadership is customer-centric and growth-focused, experienced in structuring enterprise-level partnerships, negotiating strategic customer contracts, and positioning businesses for long-term success. Marc holds a BA in Psychology from Brandeis University, with high honors, and lives outside Boston with his wife.

Gaurav Kapoor is the Co-Founder, Vice Chairman and Board Member at MetricStream focused on AI-First growth strategy and execution, customer expansion and market competitiveness.

Prior to this, as CEO, Gaurav led MetricStream to become a global market leader in Governance, Risk, and Compliance (GRC), delivering value to customers, shareholders, employees, and partners. Over the past decade, he has played key leadership roles—Co-CEO, Chief Operating Officer, and Chief Marketing Officer—driving Strategy, Go-to-Market, Sales, Marketing, Partnerships, Customer Success, Service Delivery, and Support through various phases of the company’s growth.

Gaurav also served as the founding CFO of the company helping lay the early foundation for the company’s long-term success. Under his leadership, MetricStream has expanded its global footprint, serving customers in over 30 countries with a workforce of more than 1,000 employees. Its investors have included BlueTorch Capital, Goldman Sachs, Clearlake Capital, Sageview Capital, CM Growth, Kaiser Ventures, and Singapore’s Economic Development Board (EDBI). MetricStream counts many Global 500 companies among its customers.

Prior to MetricStream, he was at OpenGrowth, an incubation and venture firm where he helped build and grow several companies including ArcadiaOne and Regalix. Prior to that, he spent several years in high growth business roles at Citi in Asia and the U.S including consumer digital payments and derivative financial products.

Mr. Kapoor has a Bachelor's degree in Technology (with Honors) from the Indian Institute of Technology, a degree in Business from FMS, Delhi, and an MBA from the Wharton Business School, University of Pennsylvania, where he graduated as a Palmer Scholar. He has served on the board of Regalix, a digital innovation and marketing company for a decade and an investor/advisor to other technology companies.

Apart from a high degree of customer intimacy working closely with dozens of the largest global organizations, he has been a regular contributor and speaker at the GRC Summit, IIA, Ops Risk, GARP, RMA, and SIFMA, among many other industry platforms. He is also a member of the Forbes Technology Council and NACD certified member.