C|OASP  Scheme Committee

Anthony Caldwell

Anthony Caldwell

Experienced cybersecurity analyst and researcher with a demonstrated history of working in the managed file transfer and financial services industry. Skilled in industrial tools such as BlackDuck, Fortify, HCL Appscan, BurpSuite Professional and Acunetix. Published and presented work in cybersecurity, AI, behavioral responses to cybersecurity. Part-time lecturer in ethical hacking. Doctor of Philosophy (Ph.D.) focused in Informal Science Education from Queen’s University Belfast. Editor in Chief of the International Journal for Information Security Research (IJISR), global chair of the World Congress on Industrial Control Systems Security (WCICSS) conference, presenter at world leading institutes such as Oxford and Cambridge in cybersecurity, cyberwarfare and ethical hacking.

Anthony

Anthony Dayrit

Anthony is a strategic cybersecurity leader committed to advancing ethical practices and resilient AI security frameworks. As a member of EC-Council’s Certified Offensive AI Security Professional (OAISP) Scheme Committee, he brings deep expertise in assurance strategies, cloud security, and behavioral detection to guide the development of robust standards for adversarial AI defense.
His leadership extends beyond technical domains. As an active volunteer in Singapore’s Cybersecurity Ecosystem, Anthony orchestrates impactful forums, mentorship programs, and community initiatives that foster collaboration across diverse cybersecurity professionals. He is known for translating complex security concepts into compelling narratives that inspire action and elevate awareness.
Anthony’s volunteer work reflects his dedication to education and inclusion. He actively mentors emerging professionals, advocates for diversity in tech, and builds bridges between industry, academia, and grassroots communities. His approach is grounded in integrity, strategic foresight, and a belief that cybersecurity leadership must be both technically sound and socially responsible.
Through his multifaceted roles, Anthony continues to shape the future of cybersecurity—empowering others, influencing policy, and championing ethical innovation. His vision is to cultivate a global community of resilient, inclusive, and forward-thinking security leaders.

Daniel Sörlöv

Daniel Sörlöv

Daniel Sörlöv is a senior technologist and security strategist with extensive experience in cybersecurity, information protection, and applied AI. Based in Sweden and working at Microsoft, he focuses on the secure design, governance, and ethical deployment of technology, Daniel’s expertise spans encryption architectures, identity and access management, data protection, and secure system design. He has a long-standing interest in how AI and automation reshape the security landscape, both as enablers of resilience and as sources of new risk. His approach combines deep technical insight with a strong ethical framework, ensuring that security solutions remain transparent, accountable, and aligned with human and organizational values.
He is particularly engaged in advancing trustworthy AI, privacy engineering, and security-by-design principles in complex, distributed environments. Daniel brings a holistic understanding of risk management that bridges technology, policy, and human factors. Known for his ability to communicate complex technical topics with clarity and precision, he contributes to cross-disciplinary discussions on digital trust, AI governance, and future security paradigms. In all his work, Daniel embodies a synthesis of technical excellence, strategic vision, and human-centered ethics. Driving forward the responsible development and secure integration of AI and digital infrastructure.

Danny Budhwa

Danny Budhwa

Danny Budhwa is an accomplished Cyber Security Leader with over 20 years of experience across healthcare, finance, retail, and academia. Danny has a proven record of elevating enterprise security posture through strategic leadership, advanced threat detection, and team development. Danny is currently the Lead Cyber Security Specialist on the Detection & Response team for Baptist Health where he is responsible for protecting sensitive patient information against global threats. Throughout his career, Danny has led and mentored global teams of information security professionals in defending organizations from cyber threats. He holds a Master of Science in Cyber Security from Fordham University, 4.0 GPA, Bachelor’s Degree in Cyber Security & Digital Forensics, and certifications such as EC-Council’s Certified Ethical Hacker (CEH), EC-Council Certified Incident Handler (ECIH), C|CISO Associate, CompTIA Advanced Security Practitioner (CASP), Security+, A+, Cisco Certified Network Associate (CCNA), CCNA Cyber Ops Associate, ISACA Certified Information Security Manager (CISM), Google Cloud Certified Professional Machine Learning Engineer, AWS Certified Machine Learning Engineer, and AWS Certified AI Practitioner.

Denis-OCallaghan

Denis O’Callaghan

Denis has over the past 38 years instigated, completed and delivered many assignments and contracts for Central and local Government, Defence, Financial and Legal clients and holds highest level government clearance. His background from working with working in the security directorates of the Foreign and Commonwealth Office, NATO ACO and MOD GOSCC has shaped his approach to security covering cyber/technical, physical and personnel in how they interact and affect each domain. He has experience in managing multinational team personnel both civilian and military from various technical disciplines including technical deployment teams (network, System Admins, Security teams). He has also audited and mentored SOC Analyst teams.
Providing budgetary oversight and justifications for operational and development projects, Denis is communicator with considerable experience of partner engagement at senior and middle levels with blue chip private sector companies, government departments, agencies, and regulators. He can communicate comfortably with clients and colleagues alike at all levels, from the technical to strategic. Denis recognises that good security is threat-informed, through access to intelligence and engagement with those who own the threat picture.
Denis has championed the building of information-sharing partnerships with other organisations at risk in order for the fast sharing of threat intelligence, comparison of security solutions and drawing upon peer knowledge. It is his considerable experience of reacting to fast moving events and crises, while also being able to design long term programmes and management build, that has allowed Denis to demonstrate some of his best work attributes in this field.

Dr. Kamran Morovati

Dr. Kamran Morovati

Dr. Kamran Morovati is a seasoned cybersecurity researcher and security leader with extensive experience spanning secure system design, security operations, and cloud and application security. He has demonstrated strong expertise in aligning academic research with real world security challenges, particularly in highly regulated and complex technology environments. Previously, Dr. Morovati served as a postdoctoral researcher at the Canadian Institute for Cybersecurity (CIC), where he contributed to advanced research initiatives focused on strengthening cyber defense capabilities and improving AI based security solutions. He holds a Ph.D. in Computer Science with a specialization in Cybersecurity, along with a Master’s degree in Information Technology and Management (Cybersecurity major) and a Bachelor’s degree in Software Engineering, providing a strong foundation across both theoretical and applied domains. His research interests center on the application of artificial intelligence and machine learning to cybersecurity, with particular emphasis on threat detection, behavioral analytics, and automated incident response. Dr. Morovati is especially interested in developing scalable, risk driven security solutions that enhance detection accuracy, reduce response time, and support resilient security architectures. Through his academic and professional work, he continues to contribute to advancing modern cybersecurity practices and innovation, globally recognized.

  Jason Scott

Jason Scott

Jason Scott is a Senior Vice President and Chief Information Security Officer with more than 25 years of experience leading technology, risk, and security organizations across global enterprises and government environments. He operates at the executive level as a business leader, accountable for enterprise security strategy, cyber risk governance, and protecting the digital and trust infrastructure that enables revenue growth, customer confidence, and scalable operations.
In his current role, Jason partners closely with executive leadership, product, sales, and customer teams to position security as a business enabler rather than a constraint. He has driven measurable business outcomes by reducing friction in customer onboarding and sales processes, accelerating security due diligence through automation, and strengthening customer trust through integrated product and support engagement. Under his leadership, security strategy is aligned to business planning, go-to-market readiness, and regulatory expectations without slowing delivery or innovation.
Prior to his civilian executive roles, Jason served in multiple senior command and leadership positions across the U.S. Army, including assignments aligned with U.S. Army Cyber operations. In these roles, he led large, multi-functional organizations responsible for mission readiness, operational execution, and the defense of critical networks supporting global and joint operations.
His military experience includes leadership of forces operating in complex, high-risk environments with accountability for global communications, cyber defense, and enterprise-scale operations. Jason’s civilian background spans consulting, energy, and financial services. As a cybersecurity consultant with Capgemini, he delivered high-visibility security program outcomes for AIG that protected critical assets and reduced operational risk. He supported revenue continuity across a global business footprint.
At Chevron, he led enterprise security assessment and penetration testing efforts in close collaboration with engineering, IT, and operations teams to safeguard revenue generating assets while enabling uninterrupted business operations. Earlier in his career, he held technical leadership roles at Progressive Insurance, building deep hands-on experience that informs his executive decision-making today.
This combination of executive leadership, operational command experience, and technical depth enables Jason to translate complex security risk into clear business decisions, align security investment with enterprise objectives, and deliver durable value at scale.
Jason holds a Master of Business Administration from Southern New Hampshire University, a Bachelor of Science from Louisiana Tech University, and graduate certificates in cybersecurity from Norwich University. His professional certifications include Certified Information Security Manager (CISM), Certified Information Privacy Technologist (CDPSE), and Certified Ethical Hacker (CEH).

Jeremy Winn

Jeremy Winn

Jeremy has been working within the field of Cybersecurity for the last 19 years. He is currently employed by the Defense Logistics Agency as an Information System Security Manager. In this role he oversees the implementation of information system security and privacy controls and performs risk assessments based on the NIST Risk Management Framework.
Jeremy obtained a BS in Business Administration, Management Information Systems, from Shippensburg University of Pennsylvania. He holds several industry certifications, including: CISSP, CCSP, ISSMP, GWAPT, GCWN, CEH, SecurityX, Cloud+, Linux+, PenTest+, CDPSE, and CCZT. He is currently serving on the Strategic Artificial Intelligence Certificate Program Advisory Panel for Harrisburg University and has previously served as a Scheme Committee Member for the EC-Council Certified Ethical Hacker (CEH) Certification Program.

Jesús M Díaz Moreno

Jesus Maria Diaz Moreno

PRINCIPAL ANALYST CYBER SECURITY – ENDPOINT

Jesus M Diaz Moreno is a Cyber Security Expert with more than 15 years in the field of IT and Cyber Security in Spanish MOD and NATO, and 27 years of experience in Communication and Information Systems (CIS) in the Spanish MOD. He has been, as well, CIS instructor in Spanish MOD. Wide experience in the design, development and establishment of cyber security in classified and unclassified networks. He has extensive experience in conducting vulnerability assessments, audit and analysis to ensure the highest level of security of the networks.
Excellent level of experience in working with network and system administrators to achieve the highest standards of cyber security. He has cooperated with the Spanish University Camilo Jose Cela in the CIS security area for the “IS Technologies Master” program.
Extensive expertise in analyzing endpoint security systems, monitor of vulnerabilities, respond to incidents, patch weaknesses and lead strategies to strengthen defenses.

Kateryna-Ovechenko

Kateryna Ovechenko

Security Evangelist, with broad commercial experience in IT. I believe that the best way to avoid vulnerabilities is to prevent them. Has successful experience in building security strategies and processes for development teams, embedding security into the development lifecycle on all stages. Speaker at various international conferences, organizer of IT conferences in Ukraine. For the past 5 years I’ve been working with AI startups from EnergyTech domain in a role of Product Manager.

Mr. Gallardo

Marcelo A. Gallardo

Marcelo Gallardo has over 35 years of IT experience, including 25 years’ experience in applied security engineering, and seventeen years’ experience conducting certifications and accreditations (C&As) of systems and networks for government entities, including Department of War (DoW). He currently manages the Governance, Risk, and Compliance department which oversees the strategy for managing risks, ensuring regulatory adherence, and implementing governance frameworks, focusing on risk assessments, policy development, audit management, vendor risk, incident response, and training to embed security and compliance into daily operations and strategy.

Patricio-German-Arguello

Patricio German Arguello

Cloud & Cybersecurity Architect

With 20 years of experience in on-premise infrastructures and 13 years in cybersecurity and Cloud environments, Patricio Arguello has managed numerous critical projects in multinational companies across various sectors such as Governance, Banking, Insurance, and International Organizations. Currently, as a Cloud and Cybersecurity Architect at Capgemini, he has extensive knowledge in networks, operating systems, security applications, cybersecurity, and monitoring systems that enhance detection and recovery capabilities. His main tasks include the design, construction, and implementation of secure architectures.
He holds certifications such as MCSA and MCSE in Cloud Platform and Infrastructure, Architecting Microsoft Azure Solutions, Microsoft Certified Identity and Access Administrator Associate, Project Management, and C|EH (Certified Ethical Hacker), C|NDA (Certified Network Defense Architect), Associate CCISO, and CCSK v5, in addition to extensive knowledge in Cloud (AWS and Azure), SIEM such as Splunk and Sentinel, EDR, Firewalls, Office365, among others.

Shaun Cooney

Shaun Cooney

Shaun Cooney is a Security and Technology executive with deep, hands-on experience in building and securing complex systems across private enterprise, big tech, and government. With a career spanning over a decade, he has worked with global technology leaders and national security organisations including contributions supporting the UK’s National Cyber Security Centre (NCSC) to strengthen resilience and embed security into innovation.
As Chief Product and Technology Officer at Promon, Shaun leads teams shaping next generation security solutions, combining strategic vision with practical technical depth. He remains actively engaged in research, architecture, and red team collaboration, ensuring that leadership decisions are grounded in real world engineering and adversarial understanding.
Shaun’s work bridges the gap between technology design and cyber defence. He has a particular focus on the intersection of AI and security, helping organisations understand and counter the emerging risks of adversarial and offensive AI. As a committee member for the Offensive AI Security Professional qualification at EC-Council, Shaun contributes his expertise to advancing global standards and building practitioner level capability in this critical area.
Passionate about mentorship and clarity in communication, Shaun regularly speaks and writes about technology leadership, AI risk, and the importance of staying curious and hands on in the evolving world of cybersecurity.

Shannon-Stewart

Shannon Stewart

I have over 19 years of IT experience, including 16 years with Telos Corporation, providing comprehensive cybersecurity, RMF, and compliance expertise to the Defense Health Agency (DHA) and other federal clients.
I currently serve as a DHA Security Controls Assessor Representative (SCAR), providing guidance and oversight for the Risk Management Framework (RMF) process to ensure systems achieve and maintain Authorization to Operate (ATO).
From January 2021 to August 2025, I served as Event Lead Validator and Event Lead for CET, overseeing IV&V assessments from Security Plan submission through ATO accreditation. During this time, every system I supported achieved successful accreditation or remains on track within the RMF process.
In addition to my technical work, I am an active contributor to the cybersecurity certification community. I recently completed another term on the EC-Council Certified Ethical Hacker (CEH) Schema Committee and now serve on the EC-Council Certified Offensive AI Security Professional (OAISP) Schema Committee, meeting quarterly to shape and define certification standards for AI-driven cybersecurity. I work closely with the Counselor Support Team, SAVR Team, and Marketplace (ERMF) Team to provide solutions, guidance, and technical support throughout the RMF lifecycle—always with a focus on collaboration, accuracy, and mission success.

Dr. Robinson

Timothy J Robinson

Dr. Robinson joined WWT from Leidos, Inc. where he served as a Chief System Engineer, Cyber Research Analyst, and Cyber Operator. Prior to that, he spent over 20 years as a United States Marine and served a large part of it as a Communications and Information Systems Officer. As a Principal Solutions Architect, his role is to focus specifically on leveraging WWT’s Security Portfolio to support the Department of Defense and Intelligence Community’s needs. He drives innovative solutions for security and information technology at scale with WWT’s OEMs. He is the primary author for WWT’s Integrated Endpoint Security Architecture and worked on a team to bring this solution to the market for customers.
Dr. Robinson has a BS in Management Science & Information Technology with a focus on Decision Support Systems from Virginia Tech. His MS is in Operations Research/ Analysis from the Naval Postgraduate School. His doctorate in Cybersecurity is from Capitol Technology University in Maryland.

The specific duties and responsibilities of the SC members include:

  • Approve key policies governing the operation of EC-Council Certification Division.
  • Assuring consistency of decision making as well as the criteria used therein.
  • Serve on appeals and complaints task groups as appointed by the SC Chair.
  • Promote and provide guidance to promote EC-Council certifications.
  • Provide guidance regarding international initiatives supporting EC-Council certifications.
  • Provide guidance to support educational initiatives related to EC-Council certifications.
  • Determine areas of research required to improve EC-Council certifications.
  • Serve on task forces / subcommittees as appointed by the SC Chair.

Note: Next SC scheduled meeting: June 2026.

Disclaimer: None of the EC-Council | Scheme Committee members are part of the management team of the International Council of E-Commerce Consultants (EC-Council) and as such, they should not be construed to be part of the Board of Directors of EC-Council.

⚠️ Security Validation Failed