Shows
re:invent securityKay Behnke (Genmab): “Lessons from building three global security teams”In this episode of re:invent security, hosts Jeroen Prinse and Irfaan Santoe sit down with Kay Behnke, CISO at Genmab. Kay has built security organizations in three very different global companies: NXP, FrieslandCampina, and Genmab. Spanning tech, food, and life sciences. Drawing from more than 20 years of experience, he reflects on how building a security team has evolved over time and what’s stayed the same.Together, they unpack what it really takes to design security functions that scale, how to balance culture and compliance across geographies, and the hard lessons learned from doing it th...
2025-10-3047 minre:invent securityPatric Versteeg (Heerema): Lead From Within — Personal Leadership for CISOs, Teams & BoardsIn this episode of re-invent security, we sit down with Patric Versteeg, European CISO of the Year 2024, to unpack the “inner game” of cybersecurity leadership. Patric argues that real change isn’t about putting on a new mask—it’s about returning to your core values and installing “compensating controls” for your own behaviors under stress. From building mixed, high-trust teams to shaping board-level narratives that actually land, he shares pragmatic tools you can use tomorrow.You’ll hear how Patric:- Builds resilient teams using a diverse mix of working styles (not clones), clear o...
2025-09-2552 minre:invent securityLaurens Jagt (CSD) & Medea de Jong (Sonepar): “Build cyber security teams that actually thrive”In this episode of re:invent security, hosts Jeroen Prinse and Irfaan Santoe sit down with two cybersecurity leaders tackling the talent gap from opposite directions. Laurens Jagt, founder of Cyber Security District, is building one of Europe’s most vibrant security communities—mentoring and guiding professionals at every stage of their career. Medea de Jong, Global CISO at Sonepar, brings the inside view of what it takes to lead, grow, and keep effective security teams in highly regulated industries.Together, they explore what’s broken in how we hire, why job descriptions miss the mark, how to...
2025-07-3159 minre:invent securityArnaud Wiehe (FedEx) & Tiago Teles (ABN Amro): “The Next-Gen CISO Must Stay Curious, or Fall Behind”In this episode of re:invent security, we sit down with Arnaud Wiehe (Managing Director of Information Security at FedEx) and Tiago Teles (Head of Advanced Analytics & AI at ABN AMRO), co-authors of Emerging Tech, Emerging Threats, to explore what it truly means to lead in cybersecurity amid accelerating innovation.From the explosive rise of GenAI and deepfakes to third-party risk at scale and secure-by-design realities—this conversation unpacks the practical and philosophical shifts modern CISOs must embrace. Arnaud and Tiago reflect on the evolving role of the security leader: no longer the “department of no,” but a...
2025-06-2658 minre:invent securityPetra Oldengarm (CVN): “Digital Sovereignty Starts With Smart Dependence, Not Full Independence”In this episode of re:invent security, we sit down with Petra Oldengarm, Director of Cyberveilig Nederland (CVN), to explore the real meaning of digital sovereignty—and why it’s more than just a political slogan. Petra takes us deep into the practical challenges and strategic decisions that come with reducing digital dependencies. From procurement strategies and fallback systems to encryption standards and talent development, this conversation unpacks what sovereignty can look like—without chasing unrealistic dreams of full independence. We also tackle the CISO’s role in influencing vendor choices, the myth of total control, and how European regulati...
2025-05-2855 minre:invent securitySri Manda (Peloton): From Gatekeeper to Innovator: How CISOs Can Harness Startup PowerIn this episode of Reinvent Security, we dive into the world of cybersecurity innovation with Sri Manda, the Chief Security and Trust Officer at Peloton. Sri brings a unique perspective—he’s not only a seasoned security leader in e-commerce, content creation, and IoT manufacturing, but also an active advisor to cybersecurity startups, venture capital, and private equity.In our conversation, Sri shares why modern CISOs must wear multiple hats: part technologist, part risk manager, part business strategist, and part mentor. He details how he distinguishes genuine innovation from marketing hype, how to set up effective proof...
2025-04-241h 13re:invent securityEsther Schagen-van Luit (Microsoft): "Security leadership requires courage and curiosity"Join hosts Jeroen Prinse and Irfaan Santoe in this episode of re:invent security as they sit down with Esther Schagen-van Luit to explore what it truly means to be a Strategic CISO in today’s security landscape. Esther is a well-known cybersecurity leader and advocate for Diversity, Equity, and Inclusion. With years of experience advising and working alongside CISOs across various sectors, she brings a sharp, candid perspective on the disconnect between tactical security operations and the strategic needs of modern organizations. In this episode, Esther unpacks:• The comm...
2025-03-2752 minre:invent securityCarlo Alexander Schreurs (FrieslandCampina): "As a CISO, how do you lead in a Human-Centered way?"In this episode, we talk with Carlo Alexander Schreurs, CISO of FrieslandCampina, about his journey of reinvention after surgery and his transition into a transformational CISO role. He advocates for moving from rigid "zero trust" to a more flexible "adaptive trust" model, better suited to digital transformation. Carlo emphasizes cultural shifts in cybersecurity, highlighting storytelling, collaboration, and psychological safety to build trust and resilience. He also stresses integrating cybersecurity with business goals, going beyond compliance to drive innovation. The episode wraps up with practical advice for CISOs on staying agile in a fast-changing landscape.Chapters:
2025-02-271h 02
The Elephant in AppSecCan You Really Quantify AppSec ROI? Here’s the Truth! ⎜Irfaan SantoeWelcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room.
Today, I’m joined by Irfaan Santoe, a seasoned security leader who has worn many hats—from CISO to Global Head of Application Security, and now Founder and CTO of RiskApp.
Beyond his leadership roles, Irfaan is a dedicated community
builder. He leads the OWASP Netherlands Chapter, created the OWASP Security Champions Guide, and co-hosts the re:invent security podcast, a live in-person show where industry leaders share how they’re reshaping security.
In this episode, we tac...
2025-02-0353 minre:invent securityDimitri van Zantvliet (NS): “Securing Dutch Railways Amid Geopolitical Turmoil”Join hosts Jeroen Prinse and Irfaan Santoe in this episode of Reinvent Security as they sit down with Dimitri van Zantvliet as they talk about the challenges of securing critical infrastructure and OT at the Dutch Railways. Especially in time of geopolitical turmoil and hybrid warfare.Dimitri van Zantvliet is an accomplished leader in information security currently serving as the CISO of Dutch Railways (Nederlandse Spoorwegen). Dimitri is at the forefront of protecting one of the Netherlands’ most vital transportation networks against an ever-evolving landscape of cyber threats.His leadership has been instrumental in...
2025-01-301h 06re:invent securityDr. Nikki Robinson (IBM) on Effective Vulnerability Management: Beyond Tools, Towards PeopleIn this episode of Reinvent Security, we dive deep into the world of vulnerability management with Dr. Nikki Robinson, a distinguished cybersecurity expert, author, and educator. With years of experience in IT operations and cybersecurity, Dr. Robinson brings a unique perspective to managing vulnerabilities in today’s ever-evolving threat landscape. During the episode, Dr. Robinson shares her journey from IT operations to earning a doctorate in cybersecurity, highlighting the pivotal moments that shaped her approach to vulnerability management. She emphasizes the importance of looking beyond patching to address the broader aspects of risk reduction, including human factors, automation, and AI...
2024-11-2852 minre:invent securityBibi van den Berg (LEI): “Why traditional risk management falls short in cyber security"Join hosts Jeroen Prinse and Irfaan Santoe in this thought-provoking episode of Reinvent Security as they sit down with Prof. Dr. Bibi van den Berg, a renowned expert in cybersecurity governance. Bibi shares her unique perspective on the limitations of traditional risk management approaches in the rapidly evolving cyber landscape. She introduces the concept of value-driven decision-making, emphasizing the need to align security practices with organizational values, not just numbers. Discover how human behavior, technology, and regulations intertwine in cybersecurity, why data limitations pose significant challenges, and how organizations can rethink their approach to managing cyber risk. Whether you’re...
2024-10-3155 min
The Security Champions PodcastIrfaan Santoe - Security Champion Program GuideIrfaan Santoe is the leader of the OWASP Netherlands chapter and the creator of the OWASP Security Champions Guide. He is passionate about scaling security in AppDev, DevOps, and Cloud and has helped numerous multinationals solve information security challenges. In this episode of The Security Champions Podcast, Irfaan walks through the Security Champion Program Guide. He shares the motivation behind the project, what makes this guide different, how security champions can affect real change, and more! [0:05] Welcome to The Security Champions Podcast [14:13] The Motivation Behind the OWASP Security Champions Guide [18:02] How To Get Buy...
2024-10-1447 minre:invent securitySander Zwiebel (NN Group) on DORA: "The Final Countdown"Join hosts Jeroen Prinse and Irfaan Santoe as they dive in the world of DORA, together with Sander Zwiebel (NN). During this episode we discuss what DORA is, why it came to existence, the scope of DORA and challenges and solutions directions for getting DORA implemented. It is the FINAL COUNT DOWN because organizations in scope for DORA have to comply by January 2025.Chapters:0:00 Introduction to DORA01:02 Introduction of the episode and Sander Zwiebel09:01 Introduction of DORA13:06 DORA's Impact on Security17:39 DORA's Impact on Financial Industry...
2024-09-2658 minre:invent securitySteve Hollands (BQCM): "The future of security is quantum-proof: Start preparing today!"Join hosts Jeroen Prinse and Irfaan Santoe in this thought-provoking episode of Reinvent Security as they welcome quantum computing and security expert Steve Hollands, Chair of the Board at Blackhills Quantum Computing. Steve dives deep into the fascinating and complex world of quantum computing, discussing its far-reaching implications for the future of cybersecurity. From the looming threat of quantum computers breaking traditional encryption to the opportunities quantum key distribution offers, this episode covers the cutting-edge advancements that could revolutionize security as we know it. Discover how AI and quantum computing could drastically shorten the timeline for encryption vulnerabilities, why...
2024-08-2950 min
The Application Security PodcastIrfaan Santoe -- The Power of Strategy in AppSecIrfaan Santoe joins us for an in-depth discussion on the power of strategy in Application Security. We delve into measuring AppSec maturity, return on investment, and communicating technical needs to business leaders. Irfaan shares his unique journey from consulting to becoming an AppSec professional, and addresses the gaps between CISOs and AppSec knowledge. Irfaan shares valuable insights for scaling AppSec programs and aligning them with business objectives. FOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast➜LinkedIn: The Application Security Podcast➜YouTube: https://www.youtube.com/@ApplicationSecurityPodcast Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2024-07-3140 minre:invent securityAshish Rajan (Kaizenteq): "Data Sovereignty Will Define the Future of Cloud Security and Compliance"Join hosts Jeroen Prinse and Irfaan Santoe in this enlightening episode of Reinvent Security as they sit down with cloud security expert Ashish Rajan, founder of Kaizenteq and host of the Cloud Security Podcast. With 250+ cloud security podcasts to his name Ashish shares invaluable insights into the evolving landscape of cloud security, discussing key challenges, best practices, and future trends. Discover the importance of identity and access management, strategies to prevent misconfigurations, and how to balance data sovereignty with cloud service capabilities. Learn why incident response in the cloud needs more focus and how to strategically select the right...
2024-07-2550 minre:invent securityPaul Watts (ISF): “Here is what it takes to be a NextGen CISO!”This episode of re:invent security shares what it takes to be the next generation (NextGen) CISO. Our guest Paul Watts, a multiple times CISOs at companies like Kantar, Domino’s Pizza UK & Ireland, Network Rail, clarifies what it takes to be the NextGen CISO. Key questions discussed are: “What are the expectations from Business/IT leaders hiring these NextGen CISOs?”, “What transformation should CISOs explicitly consider staying relevant as CISO?”, “What is most important AND challenging for the NextGen CISOs to fulfill these expectations and how can they go about it?”. Dive into the conversation with Paul, someone that has been...
2024-06-271h 01
Leaders in Finance PodcastExtra episode: reflections on the Leaders in Finance Cyber Security event 2024 with Sherelle Farrington, Richard Cassidy, Irfaan Santoe, Rudrani Djwalapersad and Irene RompaIn this extra episode of the Leaders in Finance podcast, we reflect on the insightful discussions from the Leaders in Finance Cyber Security event, which took place on May 23 at Kontakt der Kontinenten in Soesterberg.
This episode features the following speakers:
Sherelle Farrington - Cybersecurity Solutions Lead, Fortinet
Richard Cassidy - Field CISO, Rubrik
Irfaan Santoe - Security Executive, Founder, OWASP NL Leader
Rudrani Djwalapersad - EY Partner Cyber Security Financial Services
Irene Rompa – Event Moderator
--> Next years' Leaders...
2024-06-1726 minre:invent securityToon Segers (Roseman Labs): "Multi-Party Computation for Secure, Private Data Collaboration"Join hosts Jeroen Prinse and Irfaan Santoe as they dive into the world of multi-party computation with expert Toon Segers. In this episode, they explore how multi-party computation keeps data secure when collaborating, sharing and analyzing the data with partners, without exposing sensitive information. Toon Segers, co-founder of Roseman Labs and PhD candidate in mathematics and cryptography, explains the revolutionary changes this technology brings to data security and privacy of individuals, offering a promising solution to prevent data breaches and maintain confidentiality and privacy. Discover the future of data security and privacy and learn how multi-party computation is re...
2024-05-3053 minre:invent securitySunette Runhaar (Uber): "Why managing Insider Threat is so challenging, and how to start" Insider Threat deals with the fact that every employee in the organization is a potential threat. How does one identify the actual threats and how to act and respond to them? What are the good practices to scale mitigation of the Insider Threat? What are the differences in Insider Threat Programs across different regions like the US and EU? All these questions are addressed by Sunette Runhaar from Uber.Resources:'Never split the difference: Negotiating as if your life depended on it' - Chriss Voss and Tahl Raz. This is essential reading...
2024-04-2553 minre:invent security Rob van der Veer: "Treat Artificial Intelligence as Software Initiatives"What is the relationship between AI and Security? Learn from world industry expert Rob van der Veer what to consider when securing AI. This episode goes into detail about the security risks of developing AI and sheds light on how to start tomorrow with securing AI. We also discuss the upward risk of AI, what benefits will AI have and is having on doing security better!Resources:OpenCREOpenCRE chatOWASP AI Exchange5338 blogIEC on 5338SAMM Agile guidanceAI software quality gap researchDiary of CEO podcast met Mo GawdatMo Gawdat - Scary Smart Hosted on Acast. See...
2024-03-2851 minre:invent securityWelcome to re:invent securityWelcome to re:invent security, the podcast where we look at ways to reinvent information security together with industry leaders. Hosted on Acast. See acast.com/privacy for more information.
2024-03-2701 min
Leaders in Finance PodcastMicrocast: a very short episode (less than a minute!) about the upcoming Leaders in Finance Cyber Security Event on the 25th of May 2023This is a microcast: a very short episode (less than a minute!) about the upcoming Leaders in Finance Cyber Security Event on the 25th of May 2023.
Who is attacking us and how are we defending ourselves? That is the key question which representatives from Banks, Insurers, Asset Management, Academia, Government and semi Government will speak, debate and exchange information about.
Leading speakers like Mark Barwinski (Global CISO UBS), Floor van Eijk (CISO NN Group), Hans de Vries (Managing Director NCSC), Job Kuijpers (CEO & founder EYE), Marie-Louise de Smit (Broking Manager Cyber Aon), Maikel Ninaber (Director Cyber & Intel...
2023-04-2801 min