Executive Team
Daniel Nutkis
Founder and Executive Chairman
Since founding HITRUST in 2007, Dan has set a clear strategic vision as CEO that established HITRUST as the vanguard standard in managing information risk and meeting regulatory compliance for healthcare organizations seeking security and privacy certifications. He is now focused on bringing HITRUST’s services to a global, industry-agnostic audience. Dan has been recognized as a top information security influencer by both SC Magazine and Health Information Security Magazine.
Gregory Webb
Chief Executive Officer
Gregory is an experienced cybersecurity executive and technologist with 20 years of leadership in enterprise SaaS, spanning go-to-market, customer success, and engineering. He has played key roles in multiple successful company exits, including Venafi (acquired by CyberArk), Bromium (acquired by HP), and AppViewX (acquired by Haveli Investments). Gregory holds a PhD from UCLA and was a Fulbright Scholar at Stockholm University.
Todd Buchardt
Executive Vice President and General Counsel
Todd is a corporate lawyer with over 35 years’ experience in public and private companies spanning information services, education tech, utility tech, and property tech. He has been extensively involved in all aspects of mergers, acquisitions, and divestitures. His company exit work has involved IPOs, secondary offerings, as well as strategic and PE backed acquirers. Todd brings over 20 years of highly relevant experience sitting in the Chief Legal Officer/General Counsel seat, many of these roles culminating in successful exits for his owners and investors.
KC Chewning
Executive Vice President, Operations and Process Improvement
With more than 20 years of experience in operations leadership, KC is responsible for revenue operations, support operations, the API-based Results Distribution System, and the HITRUST Assessment XChange. In addition, KC and his teams manage business analytic activities that help drive HITRUST priorities and go-to-market strategies. He is passionate about creating process improvements and business efficiencies designed to serve the HITRUST community better.
Ryan Patrick
Executive Vice President, TPRM Customer Solutions
Ryan Patrick serves as Executive Vice President of TPRM Customer Solutions at HITRUST, guiding the strategy, adoption, and advancement of the HITRUST TPRM Program. With 20+ years in cybersecurity and risk roles at Intraprise Health, Fortified Health Security, MetLife, and Memorial Sloan-Kettering, he also brings a decade-spanning leadership background as a retired U.S. Army Colonel.
Bimal Sheth
Executive Vice President, Standards Development & Assurance Operations
Bimal leads the development of the HITRUST Framework (HITRUST CSF) and assurance program. His teams are responsible for conducting research on information protection practices, enhancing the framework by incorporating new or updated authoritative sources, ensuring the reliability of HITRUST certifications, and educating the HITRUST community about the HITRUST Framework (HITRUST CSF). Bimal has spent his career working with organizations to provide assurances over their information protection programs.