Corporate Finalists

Christopher Callahan is the Chief Information Security Officer for Weichert Companies, leading cybersecurity, privacy, risk management, and compliance initiatives across the organization. A trusted advisor to executive leadership, he develops security strategies that align with business objectives, strengthen governance, and reduce risk. With experience spanning real estate, financial services, pharmaceuticals, software, and banking, Christopher has built and matured enterprise security programs, optimized operations, and driven measurable business value through effective risk management and cybersecurity leadership.

Built and matured an enterprise information security program, achieving key regulatory and compliance objectives while strengthening security governance and risk management. Established cross-functional security oversight, implemented advanced security monitoring and incident response capabilities, and developed a resilient business continuity framework supported by regular exercises. Enhanced third-party risk management, identity and access controls, and enterprise security policies to align with business needs. Leveraged existing technology investments to improve threat detection, response, and overall security posture while promoting a culture of accountability, operational resilience, and continuous improvement across the organization.

Brenan Duffy is Chief Information Security Officer at the ACLU, where she leads cybersecurity in support of the organization’s mission to defend civil rights and liberties. Her career has been shaped by an offensive security background and leadership roles at BCG, GE, Comcast NBCUniversal, and the U.S. Air Force. She also served as an Intelligence Officer in the U.S. Navy Reserves and has taught cybersecurity at Wilmington University and Temple University.

My proudest accomplishment has been building a security function capable of matching the stakes of the ACLU’s mission. In less than two years we’ve built a fully scaled security team from the ground-up, bringing together deep expertise across security operations, security engineering/architecture, and GRC. We have strengthened resilience, improved our ability to detect and contain threats, and made security part of how the organization adopts new technology and manages change. The result is a stronger, more capable ACLU, better prepared to protect its people, its information, and its ability to defend civil rights and liberties nationwide.

Christina Morillo is a seasoned cybersecurity and technology executive with over two decades of cross-domain experience leading enterprise security, cloud architecture, and identity programs. As an Information Security Officer and trusted advisor, and in her current role as Senior Director, Head of Information Security at The New York Football Giants, she blends technical depth with strategic leadership to drive resilience, regulatory alignment, and business impact.

Anthony Scarola is Executive Vice President and Chief Information Security Officer (CISO) at Apple Bank, where he leads the Bank’s Information Security program, including cyber risk governance, cybersecurity strategy, regulatory compliance, incident response, and technology risk management. With more than 20 years of IT and cybersecurity experience, Anthony is a CISSP and CISA-certified executive and holds an MBA. He is passionate about developing high-performing teams, strengthening organizational resilience, and enabling secure business growth.

Since becoming CISO, I have focused on strengthening cybersecurity as a business enabler rather than a barrier. Working closely with executive leadership, technology teams, and the Board, we enhanced cyber risk governance, advanced security modernization initiatives, improved threat detection and resilience capabilities, strengthened third-party risk oversight, and maintained a strong regulatory posture. These efforts helped reduce enterprise risk, improve operational resilience, support strategic business initiatives, and reinforce customer trust. Most importantly, we built a culture where cybersecurity is embedded into decision-making across the organization, helping the Bank innovate securely while maintaining confidence among customers, regulators, and stakeholders.

Alex Shulman, PhD, is Global CISO at Kraken Technologies, securing the AI-powered platform accelerating the clean energy transition across continents. Previously, she served as a Cybersecurity Managing Director at EY and led Cloud Security at Citibank and IBM Research. A computer science pioneer with 14 patents and 30+ publications, Alex holds PhD, MSc, and BSc degrees, with expertise in machine learning, AI, and computer vision.

As CISO at Kraken Technologies, I drive a cloud-native security strategy designed for a modern, high-growth environment. Moving beyond traditional perimeter security, we work toward a dynamic, cloud-centric Zero Trust model focused on continuous visibility, posture management, and cloud-native metrics. Our approach focuses on setting guardrails and metrics to empower the engineers, who know our systems best, to take direct ownership of security within their workflows. This strategy helps reduce operational friction, strengthen our defense posture, and support business velocity - helping safeguard the platform that powers utilities globally and helps accelerate the clean energy transition.

Josh is the CISO at Vista Equity Partners where he has established and evolved a leading cybersecurity function for the world’s premier enterprise software investor. Prior to joining Vista in 2024, Josh spent 11 years as a CISO in the alternative investment space and 10 years as a cybersecurity consultant leading cyber threat management advisory services for all EY’s financial sector clients. He is the founder and co-chair of the FS-ISAC alternative investors’ council.

At Vista, the security team has delivered a body of work that extends well beyond traditional IT risk management; functioning less like a cost center and more like a strategic asset that protects and benefits the firm. Vista strives to be on the frontier of the frontier; the security team not only enables that forward-lean but is an enthusiastic participant. We’ve adopted Vista’s mission, vision and values and have injected the security mindset into the broader company culture. These accomplishments make security a value driver, and have positioned Vista as a security leader in private equity.