Medical devices
10 Medtronic security leaders
These ten current and former Medtronic cybersecurity leaders have held CISO, vice president, senior director and director roles in information security, identity, cyber defense, governance and product security at Medtronic. A reader can learn how security leaders work at Medtronic from people who have held the role.
Professionals to explore
01—10Andy Routt
LinkedInExperience: Director - Cyber Defense, Digital Forensics, and Insider Risk · Medtronic
Director - Cyber Defense, Digital Forensics, and Insider Risk at Medtronic since 2025, and former IT Director - Digital Forensics and Investigations at Medtronic (2022–2025). Andy also held Sr. IT Manager - Digital Forensics and Investigations (2019–2022) and IT Manager - Digital Forensics and Discovery Services (2014–2019) at Medtronic.
Carlos Tongesai CISA, CISM, CISSP, CEH
LinkedInExperience: IT Director - Cyber Risk and Governance · Medtronic
IT Director - Cyber Risk and Governance at Medtronic since November 2025, and former Senior IT Audit Manager at Medtronic (2024–2025). The profile says Carlos supported the CISO in designing and operationalizing the Cyber Risk and Governance Strategy and implemented and managed risk management and governance programs.
Chris Manning CISSP, CISA
LinkedInExperience: Former Senior Director Cybersecurity Governance & Risk · Medtronic
Former Senior Director Cybersecurity Governance & Risk at Medtronic (2024–2025), part of the Global Cyber & Information Security Office (GCISO) leadership team that assisted the CISO with establishing, implementing and monitoring information security. Chris has been Global Lead of IT Security at Avanos Medical since 2025.
Chris Reed
LinkedInExperience: Former Vice President, Product Security · Medtronic
Former Vice President, Product Security at Medtronic (2023–2024), and Sr. Director of Cybersecurity Policy Global Regulatory Affairs at Medtronic since 2024. The profile says Chris shapes external policy, standards and practices and supports Medtronic product regulatory interactions related to cybersecurity, interoperability and AI; Chris was also Director of Product Cybersecurity at Eli Lilly and Company (2016–2021).
Doug Lenz
LinkedInExperience: Director, Data Protection, Cryptography, and Emerging Technologies · Medtronic
Director, Data Protection, Cryptography, and Emerging Technologies at Medtronic since June 2025, a role the profile tags at Director level. Doug has also been Genesys Works Internship Program Chair at Medtronic since 2012, and the profile lists cryptography among the role's areas.
Hyoung Cho
LinkedInExperience: Director - Infrastructure and Operations - Connectivity, Data Center, and Network Security · Medtronic
Director - Infrastructure and Operations - Connectivity, Data Center, and Network Security at Medtronic since 2021. The profile describes leading global IT infrastructure, network engineering, cybersecurity and cloud connectivity across 150+ countries; Hyoung was Director - Global Information Security Engineering at PepsiCo (2015–2021).
Patrick Joyce
LinkedInExperience: Former Vice President, Chief Security Officer (CISO & CSO) · Medtronic
Former Vice President, Chief Security Officer (CISO & CSO) at Medtronic from 2005 to 2023, a role the profile tags at Executive level. Patrick has been Global Resident Chief Information Security Officer (RCISO) at Proofpoint since 2023, and was Senior Director, IT Shared Services at Carlson (2001–2005).
Scott Ostrander
LinkedInExperience: Former Senior IT Director - Security Architecture & Engineering · Medtronic
Former Senior IT Director - Security Architecture & Engineering at Medtronic (2020–2023) and former IT Director - Identity & Access Management at Medtronic (2014–2020). Scott has been Vice President & Chief Information Security Officer at SPS Commerce since 2023.
Shinoy Cherayil
LinkedInExperience: Senior IT Director, Identity & Access Management — Cybersecurity · Medtronic
Senior IT Director, Identity & Access Management — Cybersecurity at Medtronic since 2023, with a concurrent role as Interim Leader, Security Engineering (2023–2024). The profile says Shinoy reports to the CISO and owns enterprise identity end to end, covering platforms, process and governance; Shinoy was IT Director - Identity and Access Management at Medtronic (2022–2023).
Stephanie Franklin-Thomas PhD, MBA, BA, CISA, NACD.DC
LinkedInExperience: VP/Global Chief Information Security Officer · Medtronic
VP/Global Chief Information Security Officer at Medtronic since December 2023, a role the profile tags at C-Level. Stephanie was SVP/Chief Information Security Officer at ABM Industries (2021–2023) and Chief Information Security Officer at Motiva Enterprises LLC (2019–2021), and has been a Board Member at St. Luke's Health since 2019.
Choose the right perspective
Match the person's remit to your question, since enterprise governance, identity and access management, cyber defense, data protection and product security policy are different kinds of work. Check whether the person's role is current or former and when they held it, so their experience fits the period your decision depends on.
Questions to take into the conversation
- 01How should a medical device company split cybersecurity work between enterprise IT and product security?
- 02What does a cyber risk and governance program need to show a CISO and the board?
- 03How do identity and access management teams support both security goals and the business?
Reaching Medtronic security leaders
How can I contact one of these Medtronic security leaders?
Pick one of the 10 people on this page and choose "Book a paid call", or describe your project to find others. You offer a fee for a 15-minute call or a written answer, Instant Expert finds the person's work email and sends the invitation, and they decide whether to accept. The list covers 1 company: Medtronic, based on profile data retrieved on October 13, 2026. Being listed here doesn't mean someone has agreed to take calls.
How much does it cost to reach Medtronic security leaders?
You choose the offer, starting at $5 per person. It includes Instant Expert's 20% fee, so an offer that pays the person $100 costs you $125. You're charged only when the person books the call or sends the answer.
What if they don't reply?
You pay nothing. Instant Expert sends follow-up reminders, and if the person hasn't booked or answered within 7 days, the request expires and any hold on your card is released. You can invite several of the 10 people on this list at once and cap your total spend, so you pay only for the ones who accept.
Can an AI agent ask one of these Medtronic security leaders a question?
Yes. An agent with a USDC wallet on Base can ask one question without an Instant Expert account. It names the person, for example by the LinkedIn URL on this page, and pays per ask over x402 (HTTP 402). The person answers in writing or by voice note, and if nobody answers within 7 days, the payment goes back to the wallet automatically. x402 docs
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal