10 CISOs in Clinical Research

Worldwide Clinical Trials, Parexel, Fortrea, IQVIA, Clario, WCG and TriNetX are among the ten clinical research companies where these CISOs in clinical research hold or held the top security seat, and nine still hold it. Their work touches GDPR data protection, 21 CFR Part 11 and ISO 27001 work, useful for a sponsor vetting a vendor's security or a research company preparing for an audit.

10 professionals10 companiesData retrieved September 28, 2026

Professionals to explore

  1. Anthony Church

    LinkedIn

    Experience: Former VP, Chief Information Security Officer · Worldwide Clinical Trials

    Anthony Church became VP, Chief Information Security Officer at Worldwide Clinical Trials in July 2025, after Executive Director (2020-2025), Director, Security and Infrastructure (2017-2020) and Associate Director, IT and Security Manager (2015-2017) there. More than ten years inside one CRO's security team suits questions on growing a program from manager to CISO.

    Is this you? Claim your profile and get paid for calls.

  2. Chris Vaughan

    LinkedIn

    Experience: Senior Director, Global Head of Information Security · Rho

    Chris Vaughan is Senior Director, Global Head of Information Security at Rho since 2018, also serving as GDPR DPO and holding a CISSP. Chris has built information security programs in regulated environments as Rho's global head of information security and data protection officer, making this the pick for GDPR questions.

    Is this you? Claim your profile and get paid for calls.

  3. Derek Vadala

    LinkedIn

    Experience: CISO · IQVIA

    Derek Vadala has been CISO at IQVIA since February 2025, after Chief Risk Officer at Bitsight (2021-2025), and was also Advisory Board Chairman there (2025-2026). Derek has also held an Advisory Board seat at Team8 since 2018; Derek Vadala suits questions on measuring and reporting cyber risk.

    Is this you? Claim your profile and get paid for calls.

  4. Doug M.

    LinkedIn

    Experience: Vice President, Chief Information Security Officer · WCG

    From 2018 to 2026, Doug M. was Vice President, Chief Information Security Officer at WCG, and is now Chief Information Security Officer at RxSense. Head of Information Security-ISO at Otsuka Pharmaceutical Companies (U.S.) (2014-2018) and Associate Director, Information Security at Covance (2013-2014) came earlier, and Doug's experience covers sectors including pharmaceuticals and clinical technology.

    Is this you? Claim your profile and get paid for calls.

  5. Jim Cameli

    LinkedIn

    Experience: SVP, Global CISO · Fortrea

    As SVP, Global CISO at Fortrea since June 2023, Jim Cameli follows Global Chief Information Security Officer roles at Walgreens Boots Alliance (2016-2023). Jim has managed global teams of about 300 security professionals and held board roles at the Retail & Hospitality ISAC, a fit for large program design.

    Is this you? Claim your profile and get paid for calls.

  6. Matthew Matturro

    LinkedIn

    Experience: Chief Information Security Officer · TriNetX

    Matthew Matturro's TriNetX titles run from Sr. Manager, Information Technology (2019-2020) and Director, Information Technology (2020-2021) to Director, Global Security (2021-2025), Senior Director, Information Security (2025-2026) and Chief Information Security Officer since April 2026. Questions on securing real-world health data used for research fit well.

    Is this you? Claim your profile and get paid for calls.

  7. Murtaza Nisar

    LinkedIn

    Experience: Vice President - Chief Information Security Officer · Clario

    Murtaza Nisar holds Vice President - Chief Information Security Officer at Clario since 2022, a health tech company that enables clinical trials. Advisory roles with Dune Security's CISO Advisory Council and Evanta's governing board add to a record that fits for trial technology security questions.

    Is this you? Claim your profile and get paid for calls.

  8. Nelly Nauman

    LinkedIn

    Experience: Chief Information Security Officer & EVP Corporate Technology · Parexel

    Nelly Nauman is Chief Technology Officer & Chief Information Security Officer (CTO & CISO) at Parexel since April 2026 and has also been Chief Information Security Officer & EVP Corporate Technology there since 2021. Deputy CISO, Managing Director, Information Risk and Security at Moody's Corporation (2015-2021) came earlier; questions on combining technology and security leadership fit here.

    Is this you? Claim your profile and get paid for calls.

  9. Rajesh Sangur

    LinkedIn

    Experience: Senior Manager -IT & Chief Information Security Officer (CISO) · Invitro Research Solution Pvt. Ltd

    Rajesh Sangur holds Senior Manager -IT & Chief Information Security Officer (CISO) at Invitro Research Solution Pvt. Ltd since 2019. Rajesh Sangur led an enterprise-wide USFDA 21 CFR 11 implementation and directed preparations for the regulatory audit, and also covers ISO 27001 implementation, a fit for Part 11 and audit questions.

    Is this you? Claim your profile and get paid for calls.

  10. Suparna Dutta

    LinkedIn

    Experience: Chief Information Security Officer · ClinChoice

    Chief Information Security Officer at ClinChoice since July 2022, Suparna Dutta previously held Assistant Quality Assurance Manager roles at Apollo TeleHealth (2020-2022) and Vijaya Diagnostic Centre Limited (2018-2019). The quality assurance background is useful where CRO security and quality systems overlap.

    Is this you? Claim your profile and get paid for calls.

Choose the right perspective

For running security across a big organization, Jim Cameli has led about 300 security staff, and Nelly Nauman and Derek Vadala hold the CISO seat at Parexel and IQVIA. Clinical trial technology questions fit Murtaza Nisar, Matthew Matturro or Doug M.; Anthony Church and Suparna Dutta fit questions on a CRO's own program, Chris Vaughan on GDPR as Rho's data protection officer, and Rajesh Sangur covers 21 CFR Part 11 audits and ISO 27001 implementation.

Questions to take into the conversation

  1. 01What security evidence do drug sponsors ask a CRO for most often during vendor qualification?
  2. 02How do you keep electronic trial systems compliant with 21 CFR Part 11 while still patching and changing them quickly?
  3. 03Who should own GDPR and patient data protection decisions at a CRO: the CISO, a data protection officer or the quality team?

About this directory

This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.

Other perspectives in Clinical research