Become a member
Cyber Risk Institute Announces 2025 Board of Directors

Financial Institutions Reaffirm Leadership for Continued Growth

Washington, D.C. – March 20, 2025 – The Cyber Risk Institute (CRI) seated its new Board of Directors to continue to guide the organization toward another year of unprecedented growth. The newly elected Board members bring a wealth of diverse experience and perspectives, which will help shape CRI’s strategic direction in the year ahead.

“CRI’s Board of Directors are essential in driving our momentum and expanding our impact,” said CRI Founder and President Josh Magri. “This year’s election was highly competitive, with exceptionally qualified candidates dedicated to advancing Profile adoption within their organizations. I am honored to witness such strong commitment from our members.”

Elected by their peer organizations, CRI Board members represent top industry leaders in cybersecurity, risk management, and financial services. The newly-elected Board members include:

  • Paul Benda, Executive Vice President Risk, Fraud and Cybersecurity; American Bankers Association (ABA)
  • Mark Bruns, Chief Information Security Officer, FirstBank
  • Stephen Byron, Managing Director Head of Operations, Technology, Cyber and Resiliency; Securities Industry and Financial Markets Association (SIFMA)
  • Timothy J. Cuddihy, Chief Risk Officer, Depository Trust and Clearing Corporation (DTCC)
  • Susan Koski, Chief Information Security Officer, PNC
  • Jason Mayor, Vice President, Deputy CISO for RJF and CISO for Raymond James Bank, Raymond James Trust, and TriState Capital Bank
  • Katheryn Rosen, Managing Director, Global Head of Regional Information Security and Supervisory Engagement; JPMorgan Chase
  • Karl Schimmeck, EVP and Global Chief Information Security Officer; Northern Trust

The Board of Directors re-elected Brad Manganello, Managing Director of Cyber Governance, Controls and Policy at Citi, for another term as Board Chair. The Board also elected Phil Collett, Vice President and Head of Technology Control Management at American Express, as Board Vice Chair and head of the Board’s Finance Committee.

The Board also voted to confirm Jen Buckner, Senior Vice President of Technology Risk at Mastercard, and Stephanie Webster, General Counsel for the Institute of International Bankers, to serve on the Board’s Finance Committee.

Board Chair Brad Manganello said:

“I am honored to continue to serve as Board Chair and look forward to working alongside this talented group of leaders to advance CRI’s mission. Together, we can build on our achievements and drive meaningful change across the financial services sector.”

Board Vice Chair Phil Collett said:

“This is a pivotal year for CRI as it continues to expand its membership and financial sector ecosystem programs. As Vice Chair and head of the Finance Committee, I look forward to ensuring the organization scales effectively and efficiently to meet the evolving needs of our industry.”

The CRI Board of Directors reflects the complexity of the financial services industry and plays a key role in shaping CRI’s strategic initiatives. The Board oversees the development and evolution of CRI’s suite of products, including the CRI Profile, the Profile Guidebook, Cloud Profile, the Cloud Profile Shared Implementation Checklist, Cloud Profile Guidebook, and the forthcoming Maturity Model and Financial Sector Artificial Intelligence Risk Management Framework. Learn more about CRI’s Board of Directors here: https://cyberriskinstitute.org/about/

###

About the Cyber Risk Institute: The Cyber Risk Institute (CRI) is a not-for-profit coalition of financial institutions and trade associations dedicated to improving cybersecurity and resilience through standardization. The CRI Profile—formerly the Financial Services Sector Coordinating Council Financial Sector Profile—is globally-recognized framework based on the National Institute of Standards and Technology’s Cybersecurity Framework and tailored for financial services. It connects the dots between cyber best practices and expectations worldwide, helping organizations navigate cybersecurity more effectively. To learn more, visit: https://cyberriskinstitute.org/

Media Contact:
Emily Beam
Emily.Beam@cyberriskinstitute.org
March 20, 2025

Next Article
Cyber Risk Institute Announces Two Strategic Board Appointments

BACK TO TOP