Jennifer Hancock is a third-party risk management professional with more than 20 years of experience in third-party risk management. As owner of Hancock Consulting LLC, a consultancy she founded to provide specialized advisory services, Ms. Hancock has been able to help organizations develop effective third-party risk management strategies and improve their overall resilience. Her expertise has been sought after by a wide range of clients across industries, and she is dedicated to helping organizations of all sizes manage their third-party risks effectively. As a thought leader in the field of third-party risk management, Ms. Hancock has been a featured speaker at numerous industry events and conferences. She is both a Certified Third-Party Risk Professional and a Certified Third-Party Risk Assessor (CTPRA).

Valerie is a Risk Executive with expertise across Operations, Finance, Incident Response, Fraud Investigations, Financial Crimes, Board Level Communications, Third Party Assurance, Vendor Management, Compliance, and Internal Audit. She has created and led Risk Management for $2B and $5B business units at Aon. Valerie was the Chief Audit Executive at Household Finance. As a Director at PwC LLP, she was responsible for business development and service delivery for internal audit co-sourcing, risk and compliance, SOX 404, and market assessment for new products. Valerie created and led an Internal Audit Function for GE Capital’s Auto Financing Business. She has managed global teams of 30+ individuals. Her focus is on operations scaling with growth and product development/feasibility. Valerie works with start-up/incubator companies at the University of Chicago’s Polsky Center. She mentors entrepreneurs at Chicago Innovation. She is a LinkedIn Top Voice and Influencer. Valerie earned a BS in Business Administration with a minor in International Business from the University of Delaware. She also holds an MBA in Finance from the University of Delaware. Valerie has earned the following professional designations: CPA (Certified Public Accountant), CIA (Certified Internal Auditor), CTA (Certified Trust Auditor), and GE Six Sigma Greenbelt.

Chris is a Senior Advisor to Shared Assessments where he focuses on healthcare, insurance, and artificial intelligence and emerging technology. He has more than 25 years of experience helping clients effectively manage risk while exhibiting a passionate and dynamic leadership style. Prior to joining Shared Assessments, Chris led third party risk management and information technology initiatives at Bristol Myers Squibb, Bank of America, Merrill Lynch, KPMG, and Marriott International.

Sheria joins us from First Electronic Bank, where she was the Third-Party Risk Management AVP, with prior experience at Transamerica and Black Knight Financial Services. At Shared Assessments, Sheria gathers member feedback to help modernize our products and acts as a liaison between members and the Products team. An Albuquerque, NM native, Sheria enjoys cooking green chili chicken enchiladas and loves spending time with her family.

Tom Garrubba is the Co-Founder and Chief Commercial & Partnership Officer of FusionAIrre, an agentic-AI company delivering external-party assurance solutions that help organizations efficiently and defensibly respond to regulatory, due-diligence, and RFP questionnaires. He is an internationally recognized third-party risk management (TPRM) and cybersecurity expert with more than two decades of experience building, leading, and advising enterprise risk programs across highly regulated industries, including financial services, healthcare, and technology, working closely with regulators, auditors, and executive leadership. Throughout his career, Tom has helped mature enterprise third-party risk, cybersecurity, privacy, and governance programs and has been actively involved in Shared Assessments, contributing to industry standards and practitioner education. A published author and creator of the TPRM Tidbits thought-leadership series, Tom is also an adjunct professor at Robert Morris University.

Andrew is the CEO of Shared Assessments, a global risk membership organization that supports hundreds of companies, risk programs, and thousands of their associated third-party, compliance, cyber, and other risk professionals. As a risk practitioner and executive with more than 25 years in risk management, Andrew promotes the creation of cultures of accountability for organizations and their third parties. Prior to joining Shared Assessments in 2022, Andrew served as Senior Vice President, Vendor Risk Management and Corporate Insurance at Blackstone for four years, where he led a team of risk professionals responsible for supporting all business teams through all phases of the vendor lifecycle. Prior to Blackstone, he worked at BlackRock from 2010-18, where he first joined and then eventually led the firm’s Vendor Risk Management team. He also worked at Citigroup nine years, finishing as a Senior Vice President and Business Information Security Officer in Global Fixed Income, leading onsite third-party risk assessments across the United States, Europe, and Asia.

Elizabeth Dunsmoor recently joined Shared Assessments as a TPRM Principal after 15 years as a TPRM practitioner. She has experience designing holistic programs and delivering assessment work within the cybersecurity, financial services, manufacturing, and healthcare sectors. With a proven ability to oversee and execute long-term operational strategies and methodologies for risk programs, Elizabeth is proficient in a variety of management actions including translating strategies into measurable plans, partnering with Procurement, corporate teams, and firm leaders to develop a pipeline of cross-functional leaders within the risk management function. She now provides training and guidance to business leaders to ensure understanding of program requirements, third-party capabilities, and performance expectations.

Bill is a Shareholder on Schneider Downs' IT Risk Advisory Services team, specializing in Cybersecurity Governance, Risk Management, and Compliance (GRC). Bill advises organizations across all verticals—including financial services, healthcare, technology, higher education, insurance, and energy—on strengthening security posture, managing cyber risk, and achieving regulatory and industry standards.

Tom Garrubba is the Co-Founder and Chief Commercial & Partnership Officer of FusionAIrre, an agentic-AI company delivering external-party assurance solutions that help organizations efficiently and defensibly respond to regulatory, due-diligence, and RFP questionnaires. He is an internationally recognized third-party risk management (TPRM) and cybersecurity expert with more than two decades of experience building, leading, and advising enterprise risk programs across highly regulated industries, including financial services, healthcare, and technology, working closely with regulators, auditors, and executive leadership. Throughout his career, Tom has helped mature enterprise third-party risk, cybersecurity, privacy, and governance programs and has been actively involved in Shared Assessments, contributing to industry standards and practitioner education. A published author and creator of the TPRM Tidbits thought-leadership series, Tom is also an adjunct professor at Robert Morris University.

CISSP, CISM, CTPRP, and CompTIA Security+ certified information security and third-party risk leader with more than 30 years of IT experience, including over 28 years in information security, risk management, and the development of enterprise security programs. Brings extensive experience leading third-party risk initiatives, including vendor risk assessments, control evaluations, risk mitigation planning, and cross-functional engagement with business, technical, and executive stakeholders. Recognized for translating complex risk and compliance requirements into actionable decisions and scalable oversight processes.

As an Associate Director at Protiviti UK, Toby brings over 15 years of experience in technology consulting, specializing in privacy, data protection, and third-party risk management. His work focuses on implementing robust enterprise risk and compliance frameworks that enable organizations to navigate complex regulatory landscapes while fostering resilience and operational efficiency. ​

Gary Roboff is a Senior Advisor to Shared Assessments where he focuses on payments, risk management, mobile financial services, and information management. Gary has almost four decades of experience in financial services planning and management, including 25 years at JP Morgan Chase where he retired as Senior Vice President of Electronic Commerce. Gary has worked extensively in electronic payments, payments fraud, third party risk management, privacy and information utilization, as well as business frameworks and standards for electronic commerce applications. Gary was a founder of the International Security Trust and Privacy Alliance (ISTPA); led the effort to return the Bank to the merchant services business with the founding of Chase Merchant Services LLC (now Chase Paymentech); and led the development of pinned debit services at Chemical and Manufacturers Hanover. During 1993 and 1994, while on assignment from Chemical Bank, Gary served as President and CEO of the New York Switch Corporation, (the NYCE ATM and Debit Network), and was a founder of its successor corporation (NYCE Corporation, now an affiliate of FIS). Gary has served on the Board of Directors at multiple companies and organizations including ISTPA, the NYCE network, and the Electronic Funds Transfer Association, and served on the Board of Trustees at Clark University for 12 years, nine of them as Vice Chair. Gary received his B.A. and M.A. degrees from Clark University, and has completed additional graduate work at M.I.T.

Munish develops and presents the Infrastructure Cyber Incident Scale, a model designed to measure the severity of operational technology cybersecurity incidents. The scale adapts concepts from natural disaster measurement tools such as the Richter Scale to quantify the magnitude, duration, and impact of OT events. His work focuses on giving OT operators, emergency response teams, public officials, and communicators a clear and intuitive way to understand and compare incident severity in real time, along with the underlying rationale and structure of the scale.

Steve analyzes ransomware activity from 2023 through 2025 through continuous monitoring of attacker communications, leaks, and victim disclosures. His work examines shifts in ransomware gang behavior, consolidation among top groups, evolving tactics, and the economic incentives driving attacker operations. The analysis highlights high impact trends across industries and regions and details the techniques emerging in 2025. The focus is on identifying how ransomware threats are changing and which patterns matter most for preparation and defense.

Andrew is the CEO of Shared Assessments, a global risk membership organization that supports hundreds of companies, risk programs, and thousands of their associated third-party, compliance, cyber, and other risk professionals. As a risk practitioner and executive with more than 25 years in risk management, Andrew promotes the creation of cultures of accountability for organizations and their third parties. Prior to joining Shared Assessments in 2022, Andrew served as Senior Vice President, Vendor Risk Management and Corporate Insurance at Blackstone for four years, where he led a team of risk professionals responsible for supporting all business teams through all phases of the vendor lifecycle. Prior to Blackstone, he worked at BlackRock from 2010-18, where he first joined and then eventually led the firm’s Vendor Risk Management team. He also worked at Citigroup nine years, finishing as a Senior Vice President and Business Information Security Officer in Global Fixed Income, leading onsite third-party risk assessments across the United States, Europe, and Asia.