Global Finalists

An accomplished cybersecurity leader with a proven track record of building, transforming, and leading cybersecurity programs in large, complex global organizations. With a career spanning more than two decades, I have successfully delivered enterprise-wide security transformations, strengthened cyber resilience, and embedded risk management into business strategy. Known for my ability to build trusted relationships across all levels of an organization, align diverse stakeholders around a common vision, and execute initiatives that deliver lasting business value.

As Chief Information Security Officer at Ascot, Lavnish Chatrath transformed cybersecurity into a strategic business enabler that supports growth, resilience, and innovation. Through a collaborative, business-focused leadership style, he led the development of a risk-based cybersecurity program aligned to industry frameworks, strengthened cyber resilience across the enterprise, and successfully guided Ascot through ISO 27001 certification, demonstrating measurable advancements in cybersecurity maturity and governance. By fostering a culture of accountability, partnership, and by building strong relationships, he elevated security from a technical function to a trusted business advisor, building a high-performing team that helps protect the organization while enabling business success.

Christopher Holden is Senior Vice President and Chief Information Security Officer at Crum & Forster. With more than 15 years of cybersecurity experience, he began his career in digital forensics and incident response before advising organizations across financial services, retail, hospitality, and media on security strategy, risk management, and cyber resilience. Since joining Crum & Forster in 2017 and becoming CISO in 2020, he has transformed cybersecurity into a business enabler focused on resilience, innovation, and trust.

Christopher Holden transformed cybersecurity into a strategic business enabler by building a high-performing team, fostering a culture of accountability, and aligning security with organizational objectives. Through strong leadership, talent development, and cross-functional collaboration, he helped embed security into everyday business operations, improving resilience, reducing risk, and accelerating innovation. His focus on developing future leaders, creating effective governance, and building trusted partnerships has strengthened organizational confidence and driven measurable outcomes. By empowering teams and championing a proactive approach to risk management, he has elevated cybersecurity from a technical function to a catalyst for business success.

I have led global cyber teams in Life Science and Financial Services, such as Prudential, Citibank, JPMorgan, Roche, and Celgene. Additionally, while at EY Ray was the interim CISO for Proctor and Gamble, and Circle K. Board of Trustees – Geneva College. CSO50 Award Information Security Officer - 2017HMG CISO of the year 2025 New York City and NJ Charter Gartner Executive CISO Summit Chair – 2010-2019Gartner 2019 Global Chief Information Security Officer of the year

My success has been attributed to others. Mentors like Steve Katz, superiors that have taken the time to build strong trusted relationships, and devoted employees that have a true heart for hard work and trusted service for the cause. The peers I have met along the way, have always reached out with open arms to help with an urgent request. I am truly blessed with having met such great people that I can call absolute friends.

Paul Milkman is a seasoned 5-time CISO with a specialty in improving cyber program maturity as a leader at firms with a build or change objective. He has led Information Security, Cyber Threat and Defense, Policy/Standards, Executive and Regulatory interaction at Xerox, Fannie Mae, TD Bank Group, CIT and MUFG for the Americas. Along the way, he has driven innovation in cyber tech industry information sharing and cyber risk frameworks.

My team’s greatest accomplishment relates to formalizing higher maturity security services, developing talent, next generation tools and stronger processes - and making them available across the Americas, as well driving global delivery on some significant cyber areas. The bank is seeing an opportunity to improve consolidation and consistent delivery of cyber controls around the world.

David Ortiz is Vice President and Chief Information Security Officer at Church & Dwight, where he leads cybersecurity, technology risk management, resilience, and security governance. A cybersecurity executive with experience building enterprise security programs, he advises leaders and boards on cyber risk, business resilience, and emerging technologies. Ortiz is recognized for aligning cybersecurity with business strategy, developing high-performing teams, and fostering partnerships that enable secure growth.

The Church & Dwight cybersecurity team has built a mature, business-aligned cybersecurity program focused on resilience, risk reduction, and enabling growth. Through strong partnerships across Information Technology, Manufacturing, Legal, Privacy, Human Resources, Internal Audit, and executive leadership, the team strengthened security operations, governance, resilience, and emerging technology oversight. What I am most proud of is not any individual accomplishment, but the culture we created together. Our success reflects the dedication of exceptional teammates, collaborative business partners, and the unwavering support of Church & Dwight leadership.