Becker's Hospital Review

55 gram, privacy and risk assessment. He leads a 21-member team of clinical analysts and a tech- nical system architect/programmer. Sheryl Rose. CISO of Catholic Health Initiatives (Englewood, Colo.). Ms. Rose became CISO of Catholic Health Initiatives in 2010, overseeing information security for the 105-hospital health system. She is responsible for all aspects of IT and has experience with risk management, compliance and incidence response. She spent more than 20 years working in the audit and security fields with companies such as Wells Fargo and Pricewater- houseCoopers before joining CHI. Heather Roszkowski. CISO of e University of Vermont Health Network (Burlington). Ms. Roszkowski became CISO of the University of Vermont Health Network in 2014 aer serving as director of IT and communications at Fort Bliss in Texas. She gained experience in leadership, IT and information security while serving in the U.S. Army and earned a Bronze Star Medal for out- standing leadership during her time serving in Iraq. In her current role, she oversees information security for the six-hospital health system. Anahi Santiago. CISO of Christiana Care Health System (Newark, Del.). Ms. Santiago spent more than 10 years as information security and privacy officer at Philadelphia-based Einstein Healthcare Network before joining Christiana Care Health System. In her current role, she leads the informa- tion security team and initiatives in collaboration with clinical and business leaders at Christiana Care, a 1,200-bed health system. Ms. Santiago also oversees efforts to improve cybersecurity and gen- erate a culture of security and safety. William Scandrett. Vice President and CISO of Allina Health (Minneapolis). Mr. Scandrett has experience establishing security programs in healthcare as well as retail and finance. He was an information security director at Ameriprise Financial Services and then CISO for St. Paul, Minn.-based HealthEast before joining Allina Health, where he leads the 12-hospital health sys- tem's information security initiatives. e system also includes more than 90 clinics, 52 rehabilita- tion locations and 15 retail pharmacies. Paul Scheib. Senior IT Director and CISO of Boston Children's Hospital. Mr. Scheib is CISO and senior IT director for the 404-bed Boston Chil- dren's Hospital. He oversees the hospital's telecom- munications, data center operations, networking and information security. He also established the hospital's information security program and secu- rity infrastructure. He has more than 30 years of IT management experience, serving as vice president of engineering at internet service provider Genuity prior to joining Boston Children's. Benjamin Smith. CISO of MultiCare Health System (Tacoma, Wash.). As CISO for MultiCare Health System, Mr. Smith built the health system's first systemwide inforamtion security and risk management program. He also advises senior lead- ership on MultiCare's security strategy, risk man- agement and compliance. Mr. Smith has previous experience as the manager of information security and identity at Rochester (N.Y.) General Health System. In his current role, Mr. Smith oversees in- formation security for MultiCare, which includes 18,000 employees. Matthew Snyder. CISO of Penn State Health/ Milton S. Hershey (Pa.) Medical Center. Mr. Snyder is responsible for Penn State Health's information security efforts. He oversees the teams that develop and manage cybersecurity programs and the network infrastructure for the 548-bed flagship hospital. Prior to joining Penn State Health, Mr. Snyder was a CISO of the Texas Department of Public Safety and a cy- bersecurity program manager with the Nation- al Nuclear Security Administration. Glynn Stanton. Chief Security Officer of Yale New Haven (Conn.) Health System. Mr. Stanton is responsible for the five-hospital Yale New Haven Health System's information security. e system also includes Northeast Medical Group, an organi- zation with more than 70 physician practices and 1,500 employees. He has experience managing op- erational, architectural and security functions. His career includes time at AT&T and serving as infor- mation security officer at a large health system in Connecticut. Tom Stumpek. CISO of Lahey Health (Burling- ton, Mass.). Mr. Stumpek spent time as the CIO, chief technology officer and CISO of Electric In- surance Company before joining Lahey Health. He also previously led NPI enterprise architecture for GE. In his current role, Mr. Stumpek oversees information security for the five-hospital health system serving around 3,000 patients per day. Dave Summitt. CISO and Director of Cyber- security Operations at Moffitt Cancer Center (Tampa, Fla.). Mr. Summitt has a background in cybersecurity, information systems, network and engineering operations. He oversees Moffitt Can- cer Center's security operations center, as well as its identity and access management initiatives. He previously served as CISO of University of Ala- bama at Birmingham Health System and manager of information security at St. Petersburg, Fla.- based Bayfront Medical Center. Hussein Syed. CISO of RWJ Barnabas Health (West Orange, N.J.). As CISO of RWJ Barnabas Health, Mr. Syed oversees information security for a health system, which serves more than 2 million patients annually. He is also responsible for the health system's HIPAA compliance and security governance. He is a member of CHIME and has served as board chair of the Association for Execu- tives in Healthcare Information Security. Teresa Tonthat. CISO of Texas Children's Hospital (Houston). Ms. Tonthat joined Tex- as Children's Hospital in January 2018 aer spending the bulk of her career in informa- tion security, IT audit, compliance and cyber risk fields. In her current role, she oversees the hospital's information security system, assess- es cyber risk and creates additional security capabilities. Before joining Texas Children's, Ms. Tonthat served in a leadership role at mul- tinational energy service company Halliburton, overseeing a team that mitigated cyber risk for digital oil field operations. Patrick Tisdale. CISO of Regional Health (Rapid City, S.D.). Mr. Tisdale oversees infor- mation security at the six-hospital Regional Health. e health system also has six urgent care locations, senior care and home health ser- vices. He has previous experience as Regional Health Rapid City Hospital's application super- visor and as a consultant with Darca Consulting. Paul VanAmerongen. Vice President and CISO of UW Health (Madison, Wis.). Mr. VanAmer- ongen became vice president and CISO of UW Health in February 2017, responsible for devel- oping and leading the system's strategic vision for information security. Under his leadership, the health system aims to protect the information of the system's 16,500 employees and the more than 600,000 patients who visit the system each year. Mr. VanAmerongen has previous experience as an enterprise risk services specialist master for De- loitte's Cyber Risk Services practice in Seattle. John Weller. CISO of Metro Health Hospital (Wyoming, Mich.). Mr. Weller has spent more than 30 years of his career focused on IT. As CISO of the 208-bed Metro Health Hospital, Mr. Weller assesses the strengths and weaknesses of the facil- ity's cybersecurity and is responsible for meeting compliance requirements. His team secures the hospital's medical devices, workforce and vendor information. Karl West. CISO and Assistant Vice President of Information Systems at Intermountain Health- care (Salt Lake City). Mr. West is responsible for information access and data governance at Inter- mountain Healthcare. He also oversees privacy and business for the 24-hospital health system. While at Intermountain, Mr. West gained experi- ence planning and implementing its information system security data program. Before he joined Intermountain, Mr. West served as a vice presi- dent and managing partner of AT&T Consulting Services. Vugar Zeynalov. CISO of Cleveland Clinic. As CISO of Cleveland Clinic, Mr. Zeynalov advis- es the system's business and technology leaders about cybersecurity and technology risk man- agement. He is also responsible for long-range strategic planning and maintaining the system's information security program. Before joining Cleveland Clinic, Mr. Zeynalov was head of in- formation security at pharmaceutical and medical device company Hospira. n

• Cover