Webinar

Industry Leaders

About Our Experts

Colin Whittaker

 Founder and Director Informed Risk Decisions Ltd

Lecio DePaula is Vice President of Data Protection at KnowBe4, overseeing global privacy compliance and safeguarding information assets across cloud and on-prem environments. An expert in GDPR, CCPA, and HIPAA, he bridges privacy and security to build strong data protection programs. He holds CISSP, AWS Security, and multiple IAPP certifications.

Haywood Marsh

General Manager, GRC & Claims Operations Leader (NAVEX Global)

Haywood Marsh is General Manager for Lockpath and NetClaim at NAVEX Global. With deep experience in operations, product management, marketing, sales, and strategy, he drives business execution and growth. Previously, he led strategic programs at NAVEX and held leadership roles at Danaher, Booz Allen Hamilton, and the U.S. Army.

Annmarie Rombalski

Director of Solutions Engineering, GRC & Cyber Risk Specialist (LogicGate)

Annmarie Rombalski is Director of Solutions Engineering at LogicGate, helping organizations evaluate and implement GRC solutions through the Risk Cloud® platform. A former Protiviti Technology Consultant, she specializes in cybersecurity, risk management, and compliance. Annmarie holds an AWS Solutions Architect certification and guides customers through modern GRC transformation.

David Hawkins

Director, Consulting Engineer, Security Ratings & Risk Management Expert (BitSight)

David Hawkins is a Consulting Engineer at BitSight with over 20 years in IT and physical security. A former Technical Vice Chair of the Open Security Exchange, he co-authored the PHISBITs protocol. He now helps organizations advance risk, compliance, and security programs through holistic security ratings and technical guidance.

Patricia McParland

Director of Product Marketing, Compliance & Third-Party Risk Strategist (MetricStream)

Patricia McParland is Director of Product Marketing at MetricStream, leading messaging, go-to-market strategy, and market analysis for compliance and third-party risk products. With 25+ years in financial data and technology marketing at Dow Jones, Dun & Bradstreet, and startups, she brings deep expertise in product leadership and market positioning.

GRC 101: Aligning Compliance, Security, and Business Goals

Dec 16 / IT GRC Forum

Organizations today face increasing pressure to manage Governance, Risk, and Compliance (GRC) effectively, yet many still operate with siloed processes that limit visibility and create inefficiencies across departments. When GRC is fragmented, decision-makers lack timely insights, risk posture weakens, and operational costs rise. However, when GRC processes and technology are fully integrated, organizations benefit from better communication, clearer objectives, and stronger controls that support long-term growth and resilience.


This panel discussion will explore how to align GRC processes with business goals to improve performance and strengthen enterprise-wide decision-making. Experts will share strategies for enhancing your overall risk posture, reducing costs, and implementing consistent operational processes such as remediation workflows and security gap assessments. You will also learn how to manage risks and controls using unified analytics, monitor strategic progress with a comprehensive view of risk and compliance, and apply GRC insights to guide development, procurement, and investment decisions.


Join us to build a more connected, efficient, and strategically aligned GRC framework.