Sam Githinji
Chief Information Security Officer @Children's Minnesota
Signup · Get unlimited contacts
WORK HISTORY
Chief Information Security Officer @Children's Minnesota
Minneapolis, MN, US
Responsible for enterprise cybersecurity, information risk management, and regulatory security compliance across a large pediatric health system, I oversee programs that safeguard clinical care, research, and business operations. I develop and execute a multi‑year cybersecurity and information risk strategy aligned with organizational mission, business objectives. I serve as the trusted cybersecurity advisor providing clear insight into cyber risk posture, program maturity, and KPIs / KRIs to support informed, risk‑based decisions. I also lead cybersecurity budgeting, cybersecurity investment planning, and workforce strategy to ensure resources are effectively deployed to protect patient care and operational resilience.In this role, I chair the enterprise Information Risk Advisory Council, guide AI security governance, and collaborate closely with leaders across audit, legal, compliance, operations, and IT to drive unified risk governance and strengthen control accountability. I direct all major cybersecurity domains including Security Architecture, Security Operations, Incident Response, Third‑Party Risk, and Security Awareness and ensure full compliance with HIPAA, PCI DSS, and healthcare regulatory requirements. Additionally, I lead enterprise Identity & Access Management strategy and partner with Clinical Engineering, IT, and Business Continuity teams to embed cybersecurity into medical device management, enhance downtime preparedness, and reinforce enterprise resilience.
EDUCATION
Minnesota State University, Mankato
Bachelor of Science (BS), Computer and Information Sciences
Kagumo High School
High School Diploma, Sciences, Mathematics, Commerce
Bellevue University
Master of Business Administration (MBA), Cybersecurity
ABOUT SAM GITHINJI
Transformational Information Security executive with 20+ years of experience leading enterprise technology risk and cybersecurity programs. Recognized for aligning security strategy with business objectives, reducing risk exposure, and ensuring regulatory compliance through a pragmatic, risk-based approach. Trusted partner to executives and stakeholders, delivering measurable outcomes through scalable, cost-effective enterprise protection and resiliency programs that safeguard critical operations, data, and digital assets.EXECUTIVE CYBERSECURITY LEADERSHIP CAPABILITIES: • Enterprise Cybersecurity Strategy & Execution - Define and lead enterprise cybersecurity vision and multi‑year strategy; drive disciplined execution across complex, highly regulated healthcare environments.• Board & Executive Engagement - Provide clear, credible cybersecurity and risk counsel to boards and senior executives; translate technical risk into business, operational, and patient safety impact.• Cross‑Enterprise Influence & Partnership - Build trusted partnerships across business, clinical, technology, legal, privacy, and compliance stakeholders to align security objectives with organizational priorities.• Talent & Organizational Leadership - Recruit, develop, and lead high‑performing security, risk, and compliance teams; foster accountability, resilience, and continuous improvement.• Financial & Portfolio Management - Own cybersecurity budgets, investment portfolios, and resource planning to optimize risk reduction, resilience, and business value.• Transformation & Change Leadership - Lead enterprise security transformations, operating model evolution, and continuous improvement initiatives in dynamic, resource‑constrained environments.• Performance Management & Accountability - Establish and govern meaningful cybersecurity metrics, KPIs, and KRIs to drive transparency, accountability, and executive decision‑making.CYBERSECURITY & TECHNOLOGY RISK MANAGEMENT EXPERTISE:• Enterprise Cybersecurity Risk Management• Program Maturity & Governance• Security Architecture & Road Mapping• Security Operations Oversight• Operational Resilience• Regulatory & Audit Management• Third‑Party Risk Management• Identity & Access Management (IAM)FRAMEWORKS & REGULATORY STANDARDS: NIST CSF & 800-53 • ISO/IEC 27001 & 27002 • CIS • HITRUST • HIPAA • HITECH • PCI DSS • CSA • Secure Controls Framework (SCF)
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.