Speakers

Professor Ciaran Martin
Professor of Practice at the Blavatnik School of Government at the University of Oxford | Managing Director at Paladin |
From 2014 until 2020 he set up and then led the United Kingdom’s world-leading National Cyber Security Centre, within the intelligence agency GCHQ on whose
board he sat.

Professor Ciaran Martin, CB, is a Professor of Practice at the Blavatnik School of Government at the University of Oxford, as well as a managing director at Paladin
Capital and the holder of several other advisory roles in private sector cyber security. He writes and speaks frequently on cyber security in major outlets across the world, and was named on of the most influential people in European technology by Politico in 2022.

From 2014 until 2020 he set up and then led the United Kingdom’s world-leading National Cyber Security Centre, within the intelligence agency GCHQ on whose
board he sat. This was the culmination of a 23 year career in UK public service which saw him serve in senior roles in national security, constitutional and economic policy.

Eddy Thésée
Vice President Digital & Cyber Platform
Alstom

Eddy Thésée, Vice President Digital & Cyber Platform at Alstom, brings more than 25 years of experience in the railway industry, with a background spanning mathematics, telecommunications, information technology, and cybersecurity.

Before joining Alstom, Eddy worked within consulting organisations, developing and implementing mathematical algorithms for applications including stock market forecasting and oil drilling operations.

He joined Alstom in 1999, initially supporting activities related to Year 2000 mitigation. Since then, he has held a range of leadership positions across IT, global operations and end-user support, signalling, turnkey and infrastructure, and the Asia-Pacific region. He later became responsible for Processes, Methods and Tools within Alstom’s Signalling and Digital Mobility activities.

Prior to his appointment as Vice President Digital & Cyber Platform in April 2024, Eddy was responsible for defining Alstom’s cybersecurity strategy across its products and solutions portfolio. His role included overseeing cybersecurity activities within projects and new product development, as well as developing Alstom’s standalone cybersecurity business to meet growing demand across the global railway market.

Eddy has extensive experience in information systems management, change management and large-scale transformation programmes, including ERP deployment, systems engineering, requirements and configuration management, software development, and operating systems development. He has a particular passion for cybersecurity, hacking, and emerging technologies.

An energetic and highly communicative international leader, Eddy places strong emphasis on teamwork, commitment, and consistency in his management approach.

Eddy studied Mathematics, Telecommunications, Information Technologies, and Psychology at Université René Descartes in Paris and holds master’s degrees in these disciplines.

He is based in Paris, France.

James Walker
Head of Digital Safety | Railway Safety Directorate
Office of Rail and Road

James has been a Health and Safety Inspector with the Office of Rail and Road (ORR) since 2016. During that time, he has worked across several teams within the Railway Safety Directorate, including those responsible for Network Rail, Train Operating Companies (TOCs) and Transport for London, where he served as Principal Inspector.

Alongside his inspection work, James has been closely involved in developing ORR’s approach to cyber security and digital safety. This has included helping to design and deliver training for inspectors on the fundamentals of networking, software development and cyber security. His interest in the area stems from experience gained before joining ORR and has remained a key focus throughout his career.

James is now ORR’s Head of Digital Safety, a role established to lead the organisation’s approach to the safe introduction of digital systems across the railway industry. He works with industry and colleagues across ORR to promote closer integration between safety and security disciplines, helping ensure that the risks and opportunities presented by increasingly digital rail systems are effectively managed.

Dr. Frank WERNER
IT Security Taskforce
Eisenbahn-Bundesamt (NSA Germany)

Dr. Werner is a cybersecurity expert at Eisenbahn-Bundesamt (EBA, NSA DE), where he works within the cybersecurity unit to assess, strengthen, and audit the resilience of critical railway systems against evolving cyber threats. His expertise spans threat analysis, vulnerability assessment, and the protection of operational technology and safety-critical systems.

With more than 20 years at the forefront of research and innovation across a wide range of IT disciplines, Dr. Werner has contributed to advancing, digitalisation, Internet of Things (IoT), artificial intelligence, systems integration, and cybersecurity. He has played an active role in international standardisation bodies, helping shape standards and best practices that support secure and interoperable digital ecosystems.

Dr. Werner has a proven track record of cross-domain collaboration, integration, transportation, manufacturing, and logistics environments to improve resilience and interoperability. His research has covered smart manufacturing, smart logistics, IIoT, data analytics, and Industry 4.0 technologies, providing valuable insights for the digital transformation of modern companies.

In addition to his research and industry leadership, Dr. Werner contributes to the accreditation of inspection officers and the assessment of experts for the German railway sector, ensuring compliance with rigorous safety, security, and quality requirements in highly regulated environments. He is the author and co-author of more than 30 scientific publications, textbooks, technical reports and 2 patents covering various topics of AI, digitalization and IT throughout various industry domains.

Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen 

Dimitri joined NS (Dutch Railways) last year as their Chief Information Security Officer. He has been in the field for 3 decades as CIO, CTO and CISO. His responsibilities span cybersecurity matters on governance, mobilitychains, IT-, IoT- and OT strategy and European Railway Cyber Projects. Next to that he  is co-chair to the European Rail ISAC. Dimitri holds a masters degree in business administration from the University of Derby and CISSP, CISA, CISM, CDPSE, CIPP/E, CIPM and FIP cybercertificates.

Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen

Joseph’s passion for information security has shaped his academic and professional career. As a math student, he sought out specific courses in this field and chose a related topic for his Master Thesis. After having worked in other IT areas, he joined the security practice of Siemens in 2001. In 2011, he joined NS and defined the NS security roadmap including an implementation program and formed the NS Information Risk Management group. He currently works as manager Cyber Governance within the CISO Office, focusing on co-operation on cyber security within the rail sector, the implementation of the NIS directive and the NS organization for Cyber Security. Joseph is the currently chair of the Dutch Spoor ISAC and of the CER Expert Group on Cyber Security.

Tom Remberg
CISO
Bane NOR 

Trond Eskil Tingstad-Stav
Service Owner Traffic Operations
Bane NOR

Marc Silverwood
Onboard Systems Manager
Northern Trains Limited

Marc Silverwood
Onboard Systems Manager at Northern Trains Limited

With over 25 years of experience in the UK rail industry, I specialise in driving the digital transformation of rail services. As Digital Trains Programme Lead at Northern Trains, I oversee the implementation of advanced digital and cybersecurity systems across our fleet, enhancing both safety and operational efficiency. I’ve led several high-profile projects, including the “data hoovers” initiative, which uses data analytics to improve train reliability. I also focus on securing critical rail infrastructure against digital threats. I hold a Diploma in Railway Operations and a NEBOSH General Certificate, reflecting my commitment to innovation and safety.

Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited

Joshua Edgley
Global Head of Fleet Security
Hitachi Rail

Josh Edgley is Global Head of Fleet Security at Hitachi Rail, where he is responsible for managing cyber risk and maintaining the security posture of in-service fleets. His career spans the aviation, defence and rail sectors. He has maintained RAF helicopters, secured naval systems at BAE Systems, and managed onboard networks and operational systems for South Western Railway. Drawing on operational and manufacturing experience across both defence and rail, Josh brings a whole-lifecycle perspective on maintaining the security and resilience of fleets throughout decades of service.

Bruno Corasolla
Global Head of Digital Trains
Hitachi Rail

Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat

Jon Torode is a Chartered Engineer with the Institution of Engineering and Technology and a Fellow of the Chartered Institution of Railway Operators.

He has extensive experience across passenger rail, freight and rail plant, with previous roles including Saudi Arabia Railways, MTR Elizabeth line and GB Railfreight.

Jon is also a doctoral researcher at Purdue University in the United States, specialising in rail technology and the relationship between cybersecurity, operational systems and railway safety.

His recent paper, “Cybersecurity in Rail: Implications for Operational Safety,” examines how cyber incidents can create or contribute to physical safety risks across railway operations and maintenance, including through manipulation of systems, maintenance data and safety-related processes.

Damanjit Singh is an OT cyber security specialist with 12 years’ engineering and security experience at Transport for London across signalling, rolling stock and infrastructure. He is the single point of contact for cyber security across London Underground signalling systems on all lines, spanning CBTC and TBTC systems, and is the signalling cyber lead for the LU Cyber Improvement Project. damanjit

He is a CISSP-certified ISA/IEC 62443 Cybersecurity Expert with applied experience in threat and risk assessments, System-under-Consideration definitions, zones and conduits, build reviews, penetration test assurance, vulnerability management, supplier cyber assurance, NIS Regulations and the NCSC Cyber Assessment Framework. damanjit

His current role includes leading signalling cyber improvement activities, reviewing IEC 62443-aligned risk assessments and security testing, driving remediation with engineering and maintenance teams, and managing vulnerabilities across the signalling estate in collaboration with third-party OEMs and suppliers. damanjit

Before moving fully into cyber security, Damanjit worked as a Rolling Stock Electrical Engineer at Transport for London, giving him a strong engineering foundation in safety-critical railway systems, assurance, upgrades, testing and asset lifecycle management.

Salman Munir
OT Cyber Security Manager
Iarnród Éireann

Salman Munir is OT cybersecurity head at Iarnród Éireann–Irish Rail, with over 15 years of experience spanning OT, IT, cybersecurity, electrical engineering and industrial control systems. His experience includes implementing cybersecurity management systems, assessing risk, strengthening network segmentation, and applying NIS requirements, NIST frameworks and ISA/IEC 62443 standards in operational environments. Salman combines engineering expertise with practical cybersecurity delivery across rail, oil and gas, and energy infrastructure.

Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways) 

Dmitri Ivanov is the Chief Information Security Officer at Eesti Raudtee (Estonian Railways), the state-owned national rail infrastructure company of Estonia. The company is 156 years old and manages around 1,200 km of track. As head of the information security department, he is responsible for the company’s information security strategy, risk management and regulatory compliance. Eesti Raudtee is a vital service provider under Estonian law and is subject to the NIS2 Directive.

His focus is the point where corporate IT meets the operational technology (OT) that runs the railway. Security there has to protect both data and the safe, continuous movement of trains, including in systems managed by external suppliers. He is responsible for the company’s ISO 27001 information security management system and for its OT security strategy. Given the security situation in the region, the aim is that a cyber attack on corporate systems does not reach the operational side of the railway.

Dmitri has more than 20 years of experience in IT and cyber security in the Estonian public sector. Before joining Eesti Raudtee in 2023, he headed the IT and Cyber Security Unit at the Office of the President of the Republic of Estonia. Earlier he worked at the Estonian Ministry of Foreign Affairs in different positions. This path from state institutions to critical infrastructure shapes his practical, risk-based approach to security. He holds a master’s degree in Information Technology from Tallinn University of Technology.

Biography coming soon

Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)

Biography coming soon