William Barr Chief Operating Office SAIF Corporation

Bill Barr serves as SAIF Corporation’s Chief Operating Officer. SAIF is a not-for-profit, state-chartered workers' compensation company. We make workers' compensation insurance affordable and available to the employers of Oregon. We strengthen the Oregon economy by helping to keep workers' compensation insurance costs low while keeping the workplace safe.

The company vision is simple – we create the safest and healthiest state to work in country.

Before joining SAIF, Bill worked with Cambia Health Solutions in several leadership positions. His last post was as chief executive officer of the company’s subsidiary, LifeMap Assurance Company.

Prior to Cambia, he successfully launched a Tacoma based company focused on mental health and substance abuse problems in the workplace, which grew to become a part of Magellan Health Services.

Bill is an active community volunteer with interests in education, mental health and community civility. In 2016 he was appointed to the Oregon Public Employees Benefit Board by Governor Brown.

Bill holds a bachelor's degree from San Diego State University and graduate degrees from Washington State University, and the University of Missouri.

Bill and his wife Debra have two young adult children both of whom are more than moderately surprised when they find he has been asked to speak at any meeting outside the confines of their Portland, Oregon home.

Jim Bromley CFO Bill and Melinda Gates Foundation

Jim Bromley, chief financial officer of the Bill & Melinda Gates Foundation, oversees finance and accounting, financial planning and analysis, strategic planning, grants and contracts management, and several special initiatives. Jim has held several positions at the foundation, including the director of operations and the program CFO for the Global Development division.

Jim joined the foundation in 2008 as its deputy director, Financial Planning and Management for Global Development division. Prior to the foundation, Jim consulted for several CEOs and CFOs on strategy and financial planning and management. From 2000 to 2005, he worked for Nordstrom Inc., where he worked initially as the CFO and then as the EVP and president of the company’s catalog and internet division. He also spent thirteen years with various investment banks, focused on corporate finance, including eight years with CS First Boston in New York, Singapore and San Francisco.

Jim holds a BA in Economics from Middlebury College.

Joe Brusuelas Chief Economist RSM US LLP

Joseph Brusuelas has over 20 years of experience in finance and economics and specializes in analyzing the U.S. monetary policy, labor markets, fiscal policy, economic indicators and the condition of the U.S. consumer. Prior to joining RSM in July 2014, Brusuelas spent four years as a senior economist at Bloomberg, LP and the Bloomberg Briefs

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org newsletter group. As co-founder of the award-winning Bloomberg Economic Brief, Brusuelas was named as one of the 26 economists to follow by the Huffington Post. Earlier in his career, he was a director at Moody's Analytics where he covered the U.S. and global economies for the Dismal Scientist web-site. He also served as chief economist at Merk Investments L.L.C. and chief U.S. economist at IDEAglobal.

Brusuelas regularly appears on Bloomberg Television, Bloomberg Radio and is frequently quoted by the financial press on the U.S. and global economies. He is the co-author of Forex Analysis and Trading: Effective Top-Down Strategies Combining Fundamental, Position, and Technical Analyses and the upcoming "It’s Worse Than You Think: The US Economy and the Decline of the American Middle Class," both published by Wiley.

In his current role, Brusuelas provides macroeconomic perspective to help clients anticipate and address the unique issues and challenges facing their businesses and the industries in which they operate. He produces RSM’s monthly publication, The Real Economy. Each edition provides economic information and insights for and about the middle market; recent subjects include:

OPEC's waning power and the production standoff - OPEC’s powers are waning and efforts to reduce production will be offset by increased production from the U.S. and other countries. Border tax would mean sweeping changes for middle market - The proposed border adjustment tax and corporate tax reform would be the most sweeping change to the tax code since 1986.

Diane Camenisch Sr. Officer, Assurance and Risk Bill & Melinda Gates Foundation

Diane Camenisch serves as a Sr. Officer on the Bill & Melinda Gates foundation’s Assurance & Risk Management Team, where she is primarily responsible for facilitating enterprise risk management, assessing risk and monitoring risk mitigation activities in the service of enhancing the foundation's impact. Diane also supports other aspects of the team’s work in grantee and internal audit, partner organizational effectiveness and grant-related investigations. The team aims to provide assurance over the appropriate expenditure of foundation resources, help the foundation enhance the financial, operational and governance capacity of its key partners, improve the efficacy of internal processes and protect the foundation’s brand and reputation in the service of impact.

Trained as an attorney, Diane specialized initially in human rights and development, with an emphasis on transactions, both bilateral and multilateral, and compliance. After fourteen years spent in international governmental institutions, academia, the non-profit sector, a law firm and corporate in-house practice working on a variety of issues related to, among others, European Human Rights, international criminal law, public health, health care, carbon finance and energy, natural resources and the environment, Diane joined the Bill & Melinda Gates foundation seven years ago. Prior to moving into her current role, Diane managed a team providing transactional support for investments in global policy and advocacy, communications and operations. Diane has a law degree from Oxford University, an LL.M. from New York University School of Law and is a member of the New York State Bar Association.

Derek Care Director, Legal - Privacy and Legal GDPR Lead Uber Technologies

Derek Care is Director, Legal - Privacy for Uber Technologies, and the legal lead for Uber's GDPR preparation efforts. Prior to Uber, Derek was Privacy Counsel for Bloomberg LLP, and a member of the Privacy and Litigation teams at Bingham McCutchen.

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org Yvette Connor Chief Risk Officer Focal Point Data Risk

Yvette Connor is the Chief Risk Officer at Focal Point Data Risk, LLC. In that role, she leads Focal Point’s Executive Risk Consulting practice, as well as taking a strategic role overseeing the firm’s Cyber Balance Sheet initiative. Yvette joined Focal Point from consulting firm Alvarez & Marsal (A&M), where she was Managing Director of Insurance and Risk Advisory Services with a dedicated focus on enterprise-wide risk management and compliance. Prior to A&M, she served as the Director of Client Engagement for Marsh, where she was responsible for the top 1500 client relationships and a member of the analytics team supporting Global Risk Management clients. She previously was the Director of Risk Management at Vulcan Inc., a privately held company, with a diverse portfolio of more than 200 operating companies, where she led the development of a multi-disciplinary risk management department. Earlier, she served as Vice President of Risk Management at Roll International, a global food producer. In 2013, Business Insurance magazine named Connor as one of the “Women to Watch” in Risk Management and Insurance. In 2009, Treasury and Risk magazine recognized Connor as one of the top “40 under 40” professionals in her field.

John Connors Managing Partner Ignition Partners

John Connors is a managing partner at Ignition. John joined Ignition in 2005 after a distinguished career as a software- industry executive.

John spent sixteen years at Microsoft in several high-level, strategic roles. From January 2000 to April 2005 he was senior vice president of finance and administration, as well as the company’s chief financial officer. He also served as vice president of the Worldwide Enterprise Group and vice president and chief information officer (CIO). Before becoming CIO, John held a number of positions within and outside finance, including corporate controller; general manager of worldwide financial operations; director of business operations at Microsoft’s European headquarters in Paris; and director of business operations for the Worldwide Sales and Support Strategy Group.

John is a member of the board of directors of Nike (NKE), Splunk (SPLK), FiREapps, Motif Investing, Chef, Azuqua, Tempered Networks, Icertis, KenSci, and LiveStories. He was also a board member of Xensource, acquired by Citrix in 2007; Heroku, acquired by Salesforce.com in 2010; Parse, acquired by Facebook in 2013; Tier 3, acquired by CenturyLink in 2013; Scout Analytics, acquired by ServiceSource in 2014; and Xamarin, acquired by Microsoft in 2016. John also led Ignition’s investment in Splunk (IPO 2012). John was named to the 2013 Forbes Midas List, a ranking of the world’s top venture capital investors, and to Business Insider’s 2013 list of top enterprise technology VCs.

John received his BA in accounting from the University of Montana. He also received the Distinguished Alumni Award from the University of Montana.

Michael Corey Partner PwC

Mike has more than 24 years of experience and is responsible for PwC's West Coast Cybersecurity and Privacy practice. Additionally, Mike is responsible for PwC’s Internal Technology Audit Solutions practice in the US. He has provided governance, management, organization design & effectiveness and strategy & planning services to a wide array of industries and firms. He has a reputation for helping clients anticipate future risks and building productive relationships. Mike’s primary area of focus today is the strategic program development for internal technology audit, cybersecurity, privacy and IT Risk. This experience gives him a unique perspective in discussing relevant board considerations, including

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org mitigating related cybersecurity risks. He’s worked and presented to numerous board and audit committee members on the topic of IT risk and cybersecurity.

Aileen Cronin VP Business Integrity F5 Networks

Aileen has been with f5 Networks since May 2017. She is VP, Business Integrity responsible for building oversight and governance for global compliance. Previous to f5 Networks, she spent 18 years at Alaska Airlines, of which the last 10 years were dedicated to building and maintaining compliance and privacy programs.

Prior to joining Alaska Airlines, Aileen was Assistant Attorney General at Washington State Attorney General’s Office, assigned to the Labor & Industries Division. While there, she practiced in the areas of wage & hour and worker’s compensation.

Aileen earned a bachelor’s degree in communications and minor in political science from UC San Diego, and her Doctor of Law from Gonzaga University School of Law. She is an advocate for education by serving on the CHOICES education board, St. Francis of Assisi School Parent Commission and is a former trustee for the Highline Schools Foundation. She was selected and served on the City of Seattle Privacy Advisory Council as thought leader for the Advisory Committee on data privacy. Her memberships include the Washington State Bar Association, Association of Corporate Counsel, Society of Corporate Compliance & Ethics, and International Association of Privacy Professionals.

Townsend Durant Wolfe, IV Director Grant Thornton

Townsend energetically employs experience gained as a global IT and integration consultant to meet the ever-changing needs of his clients. Townsend mashes up his fearless leadership skills with his technology, industry, process development, change management, communications to affect positive charge in people and processes through the creative application of technology.

Shirin Ebrahimi Privacy Manager EY

Shirin Ebrahimi is a manager within EY’s Americas Advisory Privacy Practice. Shirin specializes in conducting General Data Protection Regulation (GDPR) readiness assessments and targeted GDPR program implementations for her clients. In addition to helping clients prepare for the GDPR, Shirin leads FTC privacy and information security assessments for entertainment, media, and technology clients. She works closely with her clients to develop customized governance models and integrated processes that enable effective risk management across the enterprise. Shirin has a CPA and a CIPP-US.

Alan Gibson Assistant General Counsel Microsoft

Alan Gibson is an Assistant General Counsel in Microsoft’s Office of Legal Compliance. His current focus is on designing and implementing an analytics program to provide an early warning and monitoring system for a defined set of compliance risks at Microsoft. During his 13 years at Microsoft, he has served in legal and business roles including

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org supporting sales, marketing, and product teams, business development, and commercial operations. Before joining Microsoft, Alan was an associate at Orrick, Herrington & Sutcliffe where he focused on corporate finance, securities, and M&A. Alan received his B.A. from Whitman College, and J.D. and M.B.A. from Seattle University. He is also a Certified Compliance and Ethics Professional.

Kim Howell Privacy Director - Marketing Consumer Business Microsoft

Kim Howell oversees the privacy compliance program for Microsoft’s Marketing & Consumer Business. She has over 15 years of privacy experience at Microsoft building governance programs including development of policies and standards, designing training and awareness strategies, and operationalizing compliance review processes. Her current role focuses on ensuring compliant collection and use of customer data for the purposes of advertising and marketing of all Microsoft products and services. Prior to working at Microsoft, Kim worked in both the financial and publishing industries. She has a Master’s Degree in Applied Statistics and a background in Database Marketing building statistical models for targeting.

Deb Huntting Senior Director, Information Security Nordstrom

Deb Huntting has been in technology for 25 years, the last 15 at Nordstrom. Deb started her career at a supply chain software company, leading both the development and consulting groups. Since joining Nordstrom, she has led software development efforts for Corporate Systems, International and Merchandising teams. Her current role is Sr. Director of Information Security and Compliance.

Robert Jacobs Partner Perkins Coie LLP

Robert Jacobs is the firm-wide chair of Perkins Coie’s Insurance Coverage practice. He represents and advises policyholders in a wide range of insurance coverage contexts including such things as product liabilities, cyber liabilities, toxic tort claims, business interruption, advertising liability, kidnap and ransom losses, and various directors and officers related liabilities. Rob’s experience includes nearly every type of commercial insurance product, including Comprehensive General Liability (CGL) policies, London Market umbrella and excess policies, “Bermuda form” excess liability policies, directors & officers’ liability insurance policies, errors & omissions liability insurance policies as well as numerous forms of specialized coverages.

Alan Kubitz Global Risk & Insurance eBay

Alan Kubitz is the Global Risk Manager at eBay. Following eBay’s separation from PayPal in 2015, Alan has been focused on evaluating and improving insurance programs and forging enterprise relationships. Prior to joining eBay in 2015, Alan was the Manager of Risk Finance and Captive Operations at AAA. During his time at AAA he managed several aspects of risk including Business Continuity Planning, Captive Operations, Quality Assurance, and Insurance Placement. Alan has a uniquely diverse background in risk management for global companies. He has worked in a wide range of industries including: chemical, oil & gas, pharmaceutical, office & consumer products, distribution & supply chain management, and promotional marketing. Alan is currently the Secretary of the Silicon Valley RIMS Chapter and previously held roles

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org in the Chicago RIMS Chapter including President. Alan earned his MBA from Keller Graduate School of Management and his BS from Illinois State University, which houses the nationally recognized Katie Insurance School, where he was acknowledged as a distinguished alumnus for achievements in Insurance & Risk Management.

Gaurav Kumar Principal Deloitte

Gaurav Kumar is a principal in Deloitte & Touche LLP, where he advises clients on managing risk and internal controls, including those around information technology risk management, identity access management, and management’s corresponding compliance with Sarbanes-Oxley/Model Audit Rule regulations. Gaurav currently leads Deloitte’s Risk and Financial Advisory services supporting companies’ implementations of the revised COSO framework for the insurance industry and serves on the American Institute of Certified Public Accountants (AICPA) task force for the development of the cybersecurity risk management attestation reporting framework.

Gaurav has over 15 years of experience in risk and internal controls transformation services in the insurance industry, and has led a number of cross-functional team efforts to serve clients in the development and implementation of their SOX compliance, actuarial, finance, and IT risk management transformation programs.

Raymond Kyan Head of IT Risk and Controls New York Life Insurance

Ray Kyan is the Head of IT Risk and Controls for New York Life. In this role, Ray is responsible for the development, implementation and execution of IT Risk Management capabilities across the NYL enterprise and its’ subsidiaries. This includes establishing a standardized IT Risk and Controls framework, providing IT Risk Advisory services, IT Risk and Control assessments, Third Party Information Security Assessments as well as overall compliance with new regulations (e.g., NYS DFS Cybersecurity Regulation, NAIC Data Security Model Law, etc.).

His main area of focus is to establish technology risk management processes that will help NYL achieve its strategic objectives while protecting their policyholders. This includes establishing the IT risk management strategy and the build out of the IT Risk and Security team to support those functions and activities.

Ray has over 14 years of experience in audit, risk management, consulting and data analytics. Prior to joining New York Life in 2015, he served as a Senior Vice President at Citi, and was responsible for the strategy and development of enhanced risk analytics within their Operations and Technology Risk and Control group. This involved analyzing data to identify the underlying root causes of control deficiencies and to determine correlations between risk issues and outage events. He has also served previously in a number of risk management leadership roles at JPMorgan and Deloitte.

Education / Certifications: Ray Kyan holds a BA in Computer Information Systems from Baruch College and is a Certified Information Systems Auditor (CISA).

Torin Larsen Director, Seattle Protiviti

Torin leads Protiviti’s Security & Privacy practice in the Pacific Northwest, and has over 15 years of IT experience in both consulting and industry. Prior to joining Protiviti in 2006, Torin worked in roles including IT management, end-user support, network management, and server administration. Torin has worked with clients in a variety of industries

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org including Technology, Retail, Financial Services, and Healthcare, helping to develop strategies around their security programs, performing assessments and audits, and helping to solve complex challenges

Eric Long SVP and Founding Principal ABD Insurance and Financial Services

Eric is a founding principal of ABD Insurance and Financial Services. Eric specializes in the risk management and strategic oversight for clients’ global insurance programs, including Property & Casualty, E&O/Cyber Liability, and Executive Liability and IPO risks. He gets satisfaction from learning about operations of his clients and implementing risk management and insurance strategies. Risk & Insurance Magazine recognized Eric as a Top Power Broker, and he is regularly invited to participate as a speaker at industry conferences. He earned his undergraduate degree from UC Berkeley.

Cliff Mass Professor of Atmospheric Science University of Washington

Cliff Mass went to Cornell University for his undergraduate education. After Cornell he entered the Ph.D. program at the University of Washington. Leaving the UW, he joined the faculty of the Meteorology Department at the University of Maryland, where he taught synoptic meteorology and weather prediction and worked on a variety of research topics, from Northwest weather circulations and high-resolution modeling, to the climatic implications of the Mount St. Helens eruption.

When an opening became available at the University of Washington, he moved back to Seattle as an assistant professor in the Department of Atmospheric Sciences. During the next few decades, Cliff and his students have systematically studied the weather of the western U.S., completing over seventy papers on West Coast phenomena as varied as orographic precipitation, coastal surges, the Catalina Eddy, and the Puget Sound convergence zone, to onshore pushes, downslope windstorms, and various local gap winds. For a number of years, he has been chief scientist of the Northwest Modeling Consortium, a group that facilitates state-of-the-art prediction over the U.S., and is active in improving the Weather, Research, and Forecasting (WRF) model.

Cliff has been involved in a number of other initiatives, including the acquisition of coastal radar on the Washington coast, improving the infrastructure of the National Weather Service, the use of smartphone pressure observations for weather prediction, and the improvement of K-12 math education. He is the author of the 2008 book “The Weather of the Pacific Northwest” and broadcasts a weekly weather information segment on KNKX, a local public radio station. Cliff also writes a weather blog (cliffmass.blogspot.com)

Cliff Mass, a full professor at the UW, is a fellow of the American Meteorological Society, is a member of the Washington State Academy of Sciences, and has served as a member of a number of National Academy committees. He is currently a member of the WRF Research Applications Board, a member of the NOAA/UCAR UMAC committee, and a member of several American Meteorological Society committees. He is now working on a new book "The Secrets of Weather Prediction."

Ignacio Martinez Vice President of Risk Management and Compliance Smartsheet

Ignacio Martinez is the Vice President of Risk Management and Compliance for Smartsheet, where he leads the company’s corporate and product risk programs and establishes compliance frameworks. Prior to Smartsheet, Ignacio

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org served as Chief Risk Officer for LifeLock, was a founding director of the consulting firm Protiviti, and spent more than a decade with Arthur Andersen.

Liane Pelletier Board Director EXPD, ATNI, NACD NW Chapter

Ms. Pelletier is an independent corporate director. She has occupied every seat at the corporate boardroom table over the last 14 years, across 6 different industries, from public company CEO, Executive Chairman, non-executive Chairman, Lead Independent Director, and either Chairman or member of Audit, Risk, Compensation and Nominating and Governance committees. Her 25-year operating career in telecom underpins her expertise in cyber security and the telecom eco-system of technologies such as mobile and cloud. Her operating career and director experience deliver critical and current know-how to the boardroom: general management of P&L, shareholder communications, CEO succession, operating in highly regulated industries, operating across the globe, developing and executing transformational strategies and extracting the many benefits from continuous process improvement. She is a NACD Board Leadership Fellow, and earned the professional certificate in Cybersecurity Oversight from Carnegie Mellon’s Software Engineering Institute/NACD. She received her B.A., magna cum laude from Wellesley College and her M.S., Management from the Sloan School at M.I.T.

Lisa Reshaur Senior Director, Governance, Risk, Continuity and Compliance Program Microsoft

Lisa Reshaur Ph.D., CBCP, CRM is the Senior Director of Microsoft’s Governance, Risk, Continuity and Compliance Program. She coordinates the Company’s Information Risk Management Council, Microsoft’s security governance program. Lisa leads the Company’s Enterprise Business Continuity Management program which includes continuity, recovery and resiliency. She also runs compliance, risk management, risk remediation and privacy for Core Services Engineering. Lisa earned a Ph.D. from the Disaster Research Center at the University of Delaware where she focused on studying businesses in disasters. Prior to joining Microsoft, Lisa worked for PricewaterhouseCoopers where she spent 14 years working with companies around the world to help them build, improve and sustain risk and compliance programs. Lisa earned a Six Sigma Black Belt, is a Certified Business Continuity Professional (CBCP) and a Certified Risk Manager (CRM).

Ethan Rojhani Managing Director, Business Risk Services Grant Thornton

Mr. Rojhani is a managing director in Grant Thornton’s Business Risk Services (BRS) practice in Denver with experience leading the full lifecycle of risk management and consulting engagements.

Mr. Rojhani’s recent experience includes leading the development and implementation of custom tools that integrate cognitive intelligence and analytics to streamline compliance assessment and audit testing. Mr. Rojhani has also recently led IT strategy engagements to help organizations identify and implement effective strategies for transforming their organizations for emerging technologies. Mr. Rojhani has helped clients identify, quantify, qualify and manage costs and risks through focused process improvement—which includes developing the training, tools, and management controls necessary to drive organizational value. In addition to his consulting-focused work, Mr. Rojhani currently leads the assessment of controls over Service Organization Controls (SOC 1 & 2), as well as the implementation of SOX implementation and compliance.

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org Prior to joining Grant Thornton, Ethan spent 10 years at PricewaterhouseCoopers (PwC) where he served public, private, and governmental clients. Ethan was also formerly an IT manager for the US Air Force and a network engineer in private industry.

Mr. Rojhani is a member of the University of Denver’s Daniels College of Business advisory board to the accounting program. He is also an adjunct professor at the University of Denver where he teaches analytic and data mining techniques for forensic accounting.

Laurie Rosini Associate Perkins Coie LLP

Laurie Rosini, an attorney in the Technology Transactions & Privacy practice, focuses her practice on electronic financial services, blockchain technology and digital currencies, and privacy and data security. Laurie has experience reviewing clients’ products and services to ensure sound privacy policies, data security practices and transaction processing. Laurie also counsels’ clients regarding the regulatory compliance issues facing electronic financial services businesses and virtual currency firms. In addition to her law degree, Laurie holds a Masters in Science in Information Systems and Data Communications.

Jeff Sanchez Managing Director, Los Angeles Protiviti

Jeff is a Managing Director in Protiviti’s Los Angeles office. He joined Protiviti in 2002 after spending 10 years with Arthur Andersen’s Technology Risk Consulting practice. Jeff has participated in technical consulting and audit projects primarily in the Financial Services, Healthcare and Retail industries. Jeff has conducted numerous technical training courses on Network Security, Wireless Security, PCI Compliance and Privacy. For the last twenty years Jeff has concentrated on internal audits in technology areas.

Kelli Santia Strategic Risk Management General Motors

Kelli Santia is a manager on the Strategic Risk Management team at General Motors in Detroit, Michigan. Kelli plays a key role in working with GM’s Risk Advisory Council, including leading workshops and decision support forums that utilize various risk management tools and techniques She also has more recently led GM’s annual enterprise risk assessment, working with the team in analyzing various data inputs and interviewing the most senior leaders at GM. Previously, Kelli assisted in the launch of GM’s operational risk management program, including extensive work on the development of a new system for this program.

Prior to her time at GM, Kelli was with Ernst & Young, providing consultative guidance on risks and controls. Her experiences were primarily focused in the healthcare industry, providing internal audit services and coordinating internal controls testing.

Kelli is a graduate of Michigan State University where she obtained her B.A. and M.S. in Accounting. She is also a Certified Public Accountant in Michigan.

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org Jeff Schaeffer Managing Director Deloitte

Jeff Schaeffer is managing director in Deloitte & Touche LLP with more than 14 years of experience specializing in risk management, corporate governance and compliance, and controls transformation within the financial services industry. In this role, Jeff leads efforts to design companywide processes and controls to support various complex global transformation programs, including working with clients to perform risk assessments across in-scope business processes and systems, design and validate internal control frameworks, identify gaps requiring remediation, and help design governance structures to sustain internal controls programs.

Reese Solberg West Coast Privacy Lead EY

Reese Solberg leads the EY west coast privacy practice. He has over 15 years of experience advising executives and product/service teams in developing comprehensive privacy programs, addressing compliance needs and driving privacy strategy to effectively leverage data assets. Prior to joining EY, Reese served as Director of Privacy for Microsoft, where he managed the corporate Advisory team and was responsible for development of training and compliance related to emerging privacy issues. Reese also served as Counsel and CPO to start-up and early stage companies in the United States and Europe.

Reese has a J.D. from Cornell Law, a M.A. from New York University and a CIPP-US certification from the International Association of Privacy Professionals.

Nick Vainisi Senior Consultant The Claro Group

Nick is a manager at the Claro Group working in its Disputes, Claims and Investigations practice. During his time at the Claro Group, he has focused on insurance claims recoveries, damages valuations as well as data analytics using complex data sets. While at the Claro Group, Nick has contributed analytics to help secure millions of dollars in recoveries for various Fortune 500 clients. He graduated from the University of Illinois with a degree in finance and while there began following blockchain and cryptocurrencies as a pet project. A few years and billions in marketcap later, the industry has developed into a minor obsession.

Roy van Duivenbode Senior Director, Risk Management - Vulcan Inc. Vulcan Inc

Roy van Duivenbode is Vulcan Inc.’s Senior Director of Risk Management, reporting to General Counsel as part of the Legal team, which includes Risk, Compliance, and Government Affairs.

Roy is responsible for Vulcan’s insurance, safety, crisis management and risk consulting to Vulcan and affiliated organizations. He leads the Risk Management and Safety team in protecting Vulcan’s people, reputation and assets, helping identify and evaluate risk in Vulcan's operations, projects, and initiatives, and ensuring that appropriate mitigation plans are implemented while managing a diverse and extensive insurance program.

Vulcan is an incredibly diverse organization which counts real estate, aerospace, philanthropy, investment management and film production among its various areas of practice. Vulcan’s affiliates include the Seattle Seahawks NFL, Portland

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org Trail Blazers NBA franchises, Seattle Sounders FC, First & Goal Inc., the Seattle Cinerama theatre, EMP museum, the Allen Institute for Brain Science, the Allen Institute for Artificial Intelligence and the Paul G. Allen Family Foundation.

Roy is experienced building and leading risk management teams in global companies with significant operating scale and complexity. Prior to joining Vulcan, Roy led the risk management function at Valeant Pharmaceuticals International, Inc. Roy was also Director of Risk Management at Avery Dennison Corporation, a Fortune 500 global labeling and packaging materials corporation. Roy received his Juris Doctor from Southwestern University School of Law in Los Angeles, and holds a double degree in Business Economics and Religious Studies from the University of California, Santa Barbara.

Aaron Weller Senior Privacy Program Lead - GDPR

Aaron has 20 years of global consulting and industry experience, including several years in each of Europe, Australia and the US. He spends the last 5 years at PwC, leading their Privacy practice for the West Coast and is now helping a leading technology company with their GDPR implementation efforts.

Prior to joining PwC, Aaron co-founded and ran an information security and privacy strategy consulting firm and held other roles including as the Chief Information Security & Privacy Officer for two multi-national retailers.

Aaron transitioned his focus towards Information Privacy beginning in 2008 and currently consults in both areas of practice. Aaron’s focus over the last few years has been working with technology companies, and others who are using personal data in innovative ways, to understand and manage data related risks.

He is recognized as a thought leader in the field of privacy, and has been accepted as a Fellow of Information Privacy (FIP) by the IAPP. Aaron has presented at national and international conferences on various privacy and data governance topics. He also was a co-author on the PwC whitepaper “10 minutes on data privacy” and guest lectures on privacy and risk management at the University of Washington and Central Washington University. He has also been quoted in publications including the Wall Street Journal and published in the book Using Security Metrics to Drive Action.

2017 Pacific Northwest Enterprise Risk Forum Speaker | www.EnterpriseRiskForum.org