Company record
Who leads security at H&R Block
The most recent move CISO Tribune has on record at H&R Block was announced in the week of March 24, 2025: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
What H&R Block tells the SEC
Its fiscal 2026 Form 10-K, filed August 14, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since March 24, 2025 · 1 recorded move · every claim links to a sourced record · Updated
Where H&R Block appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed August 14, 2026
About H&R Block
CISO Tribune's Leadership Bench files H&R Block under Financial Services and North America. The SEC classifies it under standard industrial classification 7200, Services-personal services, and EDGAR lists its ticker as HRB. The Wire has one security-leadership move at H&R Block on record, announced in the week of March 24, 2025.
What H&R Block's 10-K says about security governance
H&R Block's fiscal 2026 Form 10-K, filed August 14, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Top security role, as the filing names it: Chief Information Security Officer.
Board oversight: the Audit Committee.
“The Audit Committee of the Board of Directors has the primary responsibility of assisting our Board in the oversight of policies and processes pertaining to the ERM program and specifically considers risks and controls relating to, among other things, data and cybersecurity.”
How often the board or committee hears about it: at least annually.
“Our Vice President, Legal and Corporate Secretary, oversees the activities of the Enterprise Risk Committee and, together with the Chief Information Security Officer (CISO), briefs the Audit Committee and the Board of Directors on information security risk matters as a part of regular ERM reports, with a deep dive focused on information security at least annually (or more frequently if appropriate).”
Frameworks and standards the filing names: NIST Cybersecurity Framework.
Experience of the security leadership, as the filing states it:
“Our CISO, who reports directly to the CLAO, has extensive cybersecurity knowledge and skills gained from over 30 years of experience in consulting and technology roles, with more than 19 years of Information Security specialization.”
Material incidents: the filing states none.
“As of the date of this report, we have not identified risks from any known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our business strategy, results of operations, or financial condition.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security leaders of H&R Block on our record
Phillip Miller: named Vice President and Chief Information Security Officer, announced in the week of March 24, 2025 record
Security chiefs at other Financial Services organizations
Other organizations CISO Tribune files under Financial Services with a named security chief on record: those in North America first, in alphabetical order from H&R Block onward.
HDI Global Insurance Company (HGIC): Todd Spight, Chief Information Security Officer.
Illumia: Sean Bruton, Chief Information Security Officer.
JPMorgan Chase: Patrick Opet, Global Chief Information Security Officer.
KKR: David Stern, Chief Information Security Officer.
Luma Financial: Bryan Thompson, Chief Information Security Officer.
Ncontracts: Clay Carter, Chief Information Security Officer.
Northwestern Mutual: Igor Zabara, Chief Information Security Officer (CISO).
Oak Hill Advisors: Pascal van Garderen, Chief Information Security Officer.
Questions CISOs ask about H&R Block
- Who are the security chiefs at other Financial Services organizations?
- On CISO Tribune's record they include Todd Spight at HDI Global Insurance Company (HGIC), Sean Bruton at Illumia, Patrick Opet at JPMorgan Chase and David Stern at KKR.
- Which board body oversees cybersecurity at H&R Block?
- H&R Block's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.