CISO Enterprise Finalists

James Clark is a senior technology and cybersecurity executive with deep experience leading enterprise IT and Operational Technology (OT) security for critical infrastructure organizations. He partners with executive leadership and boards to align cybersecurity with business strategy, risk, resilience, and regulatory priorities. Known for building high performing teams and trusted cross functional partnerships, James focuses on protecting critical operations, enabling secure growth, and developing future leaders in a rapidly evolving threat landscape.

Under my leadership, Information Security evolved from a compliance driven function into a trusted enterprise risk and resilience partner. We built a defense-in-depth program across IT and operational technology, strengthened architecture, identity, monitoring, and recovery capabilities, and improved how cyber risk is communicated to executives and the board. Just as importantly, we transformed our relationship with OT, replacing friction with trust and shared accountability. These efforts strengthened our TSA Security Directive compliance posture, improved audit outcomes, increased regulator confidence, and built a stronger security culture for future growth.

Donna Ross is Executive Vice President and Chief Information Security Officer at Radian, where she leads the company’s information security program. With more than 20 years of experience across cybersecurity, risk, compliance, technology, and operations, she has held senior roles at Accolade, Corning, GMAC, and Prudential. Donna is active in the cybersecurity community and has been recognized with honors including Titan100, Global CISO 100, C100, HMG GLIA, and HousingWire Women of Influence.

As Radian’s first CISO, Donna Ross led the transformation of the company’s information security program into a mature, enterprise-wide capability that protects the business while enabling growth, modernization, and customer trust. Under her leadership, the team strengthened security operations, incident response, vulnerability management, third-party risk, identity and access practices, and executive cyber risk reporting. Donna also developed cybersecurity leaders and built strong partnerships across the organization, ensuring security is embedded early in business and technology decisions. Her legacy is a more resilient organization, stronger security culture, and team prepared to continue advancing Radian’s mission.

Anahi Santiago is the CISO at ChristianaCare, Delaware's largest healthcare provider, where she leads the organization's cybersecurity & assurance program. Previously, she spent more than a decade as Information Security and Privacy Officer at Einstein Healthcare Network. Santiago holds a B.S. in Electrical & Computer Engineering & an Executive MBA from Drexel University. She is an active leader in several healthcare cybersecurity organizations, including H-ISAC, the Healthcare Sector Coordinating Council, the Mid-Atlantic Healthcare Cybersecurity Alliance, & WiCyS.

Over the last 10 years, my team has enabled ChristianaCare to thrive in the face of significant technological industry transformation. By ensuring that information security is built into the fabric of all initiatives, we have been able to align our risk management practices with ChristianaCare's strategic initiatives. Our mantra of creating a frictionless yet secure environment has facilitated growth, the evolution into virtual and at home care and adoption of highly innovative technologies without creating undue risk.

David Topelberg, CISSP, leads global cybersecurity, risk, compliance, and AI governance initiatives for PennEngineering. Over a 20-year career spanning manufacturing and regulated industries, he has built security programs that help organizations earn customer trust, reduce risk, and support growth. Known for his practical, business-first approach, David believes security leaders should help organizations find a secure way to say "yes." He is passionate about developing people, mentoring future leaders, and enabling innovation through trust and collaboration.

One of our team's greatest accomplishments has been building a security, risk, and compliance program that helps PennEngineering support business growth, strengthen customer trust, and improve operational resilience worldwide. Together, we established a scalable governance framework, achieved ISO 27001 certification, enhanced risk management practices, and built a culture where security is a shared responsibility. The results have been tangible: faster responses to customer security assessments, reduced friction during onboarding and vendor reviews, improved security awareness across the organization, and stronger confidence in our ability to support the business securely as it continues to grow and innovate.

Aaron Weismann is Chief Information Security Officer at Main Line Health, where he leads enterprise information security, technology risk management, governance, and cyber resilience. Previously, Aaron was CISO of the Massachusetts Executive Office of Health and Human Services, which oversaw benefits and support for over 3 million citizens. Prior to that, Aaron was an attorney who specialized in technology contracting plus privacy and information security advisory.

Under my leadership, we have reimagined information security at Main Line Health as a pillar of clinical resilience. We rebuilt the function into a multi-award-winning, risk-based program focused on protecting patient safety and dignity. We achieved HITRUST r2 certification with exceptionally broad coverage across the patient journey, implemented real-time dynamic isolation to reduce cyber blast radius, and established complete visibility across our network boundaries and assets. We also developed rapid recovery capabilities for digital darkness events and brought analog downtime training directly to clinical units, helping ensure care continuity during major disruptions.