Large Enterprise Finalists

Arvin Bansal is CISO and an IT executive at C&S Wholesale Grocers, leading cybersecurity across a $30 billion enterprise. A two time Fortune CISO, he has led security transformation across multiple industries. Arvin is a Columbia Business School MBA and Harvard Business School PLD alumnus and author of the TRACE Agentic AI Security Framework. He contributes to the security community through RSA, Gartner, Black Hat MEA, Google Cloud Next and nonprofit board service.

I believe cybersecurity starts with understanding the business. My team has helped secure multiple acquisitions and integrations, including a $2 billion transaction, enabling growth, accelerating synergies and protecting critical operations through major change. We strengthened resilience across a critical food distribution network serving thousands of retailers, communities, and government and military customers, while creating a secure path for AI innovation. I am most proud that we achieved these outcomes by bringing talented people together, listening to different thoughts, challenging old ways of working, and empowering the team to deliver what matters most to the business.

Alan Rosa is Senior Vice President, Chief Information Security Officer and Head of Infrastructure and Technical Operations at CVS Health, leading 3,000 colleagues across cybersecurity and infrastructure. Previously, he was the CISO at Twitter and Marriott, head of Technology at MSG, and an infrastructure leader at Disney. A Navy veteran, he attended the University of Central Florida, completed his graduate studies at Seton Hall and Columbia University respectively and attended law school at Rutgers University.

My greatest success is not a technical accomplishment or a completed project but the growth of the people I am privileged to lead and the proof is behavioral. Decisions that once waited for me are made a level down, by leaders who know the credit is theirs and the risk is mine. Bad news reaches me early, from the person who owns it, because honesty has never cost anyone here. My deputy is ready to take my chair, by design. My part was hiring well and funding the unglamorous work. The growing was theirs; watching it is the reward.

Rishi Tripathi is SVP, CISO & CTO at Mount Sinai Health System, where he leads technology and cybersecurity professionals and oversees a large budget supporting a leading academic health system. Previously, he served as the NBA’s first CISO and held cybersecurity leadership roles at Citigroup and Tyco International. A CSO Hall of Fame inductee, Rishi is recognized for driving large-scale digital transformation, cyber resilience, and innovation across healthcare, finance, and sports.

I came to the US in 2000 and began my career working construction on electrical substations. While working full time, I earned my MBA and embraced every opportunity to learn and grow. That mindset led to leadership roles at Citigroup, Tyco, and the NBA, where I built and led global cybersecurity organizations protecting critical operations and iconic brands. Today, as Senior Vice President, CISO & CTO at Mount Sinai Health System, I lead technology and cybersecurity professionals and oversee a large budget, driving innovation, resilience, and digital transformation while remaining grounded in hard work, humility, and lifelong learning.

Nick Vigier is the CISO at Oscar Health, with 25 years in security and 17 years leading teams. He has served as CISO across industries including financial services, SaaS, identity, and consulting, and was previously CIO at Gemini, a regulated cryptocurrency exchange. His diverse experience gives him a unique CIO vs CISO perspective. Nick is passionate about building innovative security programs that drive resilience and business velocity.

Over the past three years, Oscar Security has evolved from a reactive, siloed function into a cross-functional business partner focused on helping the company move faster, safely. Investments in relationships, infrastructure, automation, and shared risk frameworks have shifted security earlier in the lifecycle, improving decisions while reducing friction and toil. We have embraced AI both as a capability to secure and as a tool to accelerate our own operations and engineering. Most importantly, the transformation is cultural: security is no longer a checkpoint, but a force multiplier demonstrating that speed, resilience, and security can be compounding advantages.