Covenant Health’s David O’Brien Named Among Healthcare’s Top Cybersecurity Leaders

When patients come to Covenant Health, they trust us with some of the most important moments of their lives. Behind every appointment, procedure and medical record is a commitment to keeping patient information secure and ensuring caregivers have reliable access to the technology they need to provide safe, high-quality care. 

That commitment recently earned national recognition for David O’Brien, vice president of information technology and chief information security officer for Covenant Health. O’Brien was named to Becker’s Healthcare‘s 2026 list of Hospital and Health System CISOs and Chief Privacy Officers to Know. 

The recognition highlights leaders who are helping healthcare organizations navigate an increasingly complex digital landscape while supporting the delivery of safe, reliable patient care. 

For O’Brien, the honor reflects the work of teams across Covenant Health. 

“I am honored by this recognition, but it reflects the work of an incredible team across Covenant Health,” O’Brien said. “Over the past two years, we have focused on strengthening our cybersecurity program, enhancing resiliency and building a culture of collaboration, accountability and continuous learning.” 

Strengthening Cybersecurity Across Covenant Health 

Since joining Covenant Health, O’Brien has transformed the organization’s cybersecurity program from a traditional control-based function into an enterprise-wide capability focused on risk management, resilience and supporting modern healthcare delivery. 

Under his leadership, Covenant Health redesigned its cybersecurity operating model and strengthened governance, risk management and incident response capabilities. He also guided the development of updated cybersecurity policies aligned with the NIST Cybersecurity Framework 2.0 and HIPAA requirements. 

O’Brien’s Becker’s recognition follows another national honor. He was recently named to the HotTopics Global Top 100 CISO List. 

Tiffany Cross, senior vice president and chief information officer for Covenant Health, said O’Brien’s leadership has helped modernize the organization’s cybersecurity program while supporting its long-term strategic goals. 

“David’s recognition reflects the meaningful impact he has made across Covenant Health through his leadership and commitment to cybersecurity excellence,” Cross said. “He has led the modernization of our cybersecurity program, building a strong security foundation that enhances resilience, mitigates emerging threats and supports the organization’s strategic and digital transformation goals. His strategic vision, collaborative leadership and dedication to advancing our cybersecurity capabilities make this recognition well deserved.” 

Cybersecurity Is About Patient Care 

While cybersecurity is often viewed as a technology issue, O’Brien believes its impact goes much deeper. Cybersecurity work often happens behind the scenes, but its impact is felt throughout patient care operations across the health system. 

“I often remind people that cybersecurity is not fundamentally about technology. It is about protecting our ability to deliver care,” he said. 

Every system, device and application used throughout Covenant Health supports the work of physicians, nurses and caregivers. Protecting those systems helps ensure clinicians have access to the information and tools they need when patients depend on them most. 

“When we frame cybersecurity in terms of patient safety, continuity of care and operational resilience, the conversation changes,” O’Brien said. “Our goal is to help every employee understand that the actions they take every day contribute to protecting the people who depend on us.” 

Leading Through Service 

Throughout his career, O’Brien has embraced a servant leadership philosophy, focusing on building strong teams and creating opportunities for others to succeed. 

“Technology and threats will continue to evolve, but strong teams are built when leaders create trust, remove obstacles, invest in people and empower others to succeed,” he said. “Resilient organizations are built by developing resilient people.” 

That focus on people aligns closely with Covenant Health’s mission to improve the quality of life through better health. Whether caring for patients at the bedside or protecting critical systems behind the scenes, Covenant Health’s caregivers are united by a shared commitment to serving the community. 

As healthcare becomes increasingly digital, O’Brien believes strong cybersecurity practices will remain essential to protecting patient information, maintaining reliable operations and supporting the communities Covenant Health serves. 

“At the end of the day, our work is about helping ensure that patients receive the care they need when they need it,” he said. “That’s what makes this work meaningful.”