Cyber Risk Engineering and Emerging AI Risks with Jay Vinda from Mosaic Insurance

<p>Jay Vinda, Global CISO and Cyber Risk Engineering Lead at Mosaic Insurance, joins host James Benham live at ITC 2026 to explore cyber risk engineering, the emerging risks surrounding AI, and how cybersecurity intelligence is changing insurance.</p><p><br></p><p>Jay grew up in London wanting to be a chef, studied mechanical engineering, and spent a couple of months in Peru building wind turbines for villages without electricity. A cybersecurity graduate scheme in 2016 was meant to last a couple of years; he stayed, earned a master&#39;s in information security while working, and spent about eight years protecting banks and government before moving into insurance. At Mosaic he protects the company as its CISO and helps its cyber underwriters assess every risk the way an attacker would.</p><p><br></p><p>In this episode:</p><p>• Why the person who buys a cyber policy and the CISO who knows what could go wrong are rarely in the same conversation, and how Jay bridges the two.</p><p>• How criminal marketplaces and ransomware operators made funding, not technical skill, the real barrier to cybercrime.</p><p>• Why generative AI erased the old phishing tells, and what the scams that work today look like: no urgency and no link.</p><p>• Why the basics still beat the shiny tools, and why so much &quot;AI-powered&quot; security is fluff.</p><p>• What frontier AI changes for defenders, from vulnerabilities that sat undetected for 26 years to a risk appetite far lower than a criminal&#39;s.</p><p><br></p><p>Key Quotes:</p><p>&quot;Insurers have loads of data, but they&#39;re just not using it very well.&quot;</p><p>&quot;Social engineering is still a very easy way to compromise a company.&quot;</p><p>&quot;Our risk appetite on the defensive side is just a lot lower than a criminal&#39;s.&quot;</p><p>&quot;Really, you don&#39;t need that much to be a criminal.&quot;</p><p><br></p><p>Chapters:</p><p>00:00 Cyber risk engineering and emerging AI risks, live at ITC 2026</p><p>00:24 First time in Vegas and the original attention hackers</p><p>02:09 Growing up in London and wanting to be a chef</p><p>05:25 Mechanical engineering and wind turbines in Peru</p><p>06:05 Falling into cybersecurity in 2016</p><p>10:06 When cyber stopped being a game and became a board issue</p><p>11:06 Insurance, the honeypot of data</p><p>12:10 From banks and government to insurance</p><p>13:08 What Mosaic does: Lloyd&#39;s syndicates and skin in the game</p><p>14:13 Two hats: CISO and cyber risk