CISO Tribune

Company record

Merck CISO: Tim McKnight

CISO Tribune company record: Merck, seat filled, since May 2026

The current Senior Vice President, IT Risk Management & Security and Chief Information Security Officer of Merck, as tracked by CISO Tribune, is Tim McKnight, whose appointment was announced in May 2026 (CDO Magazine). Read the record. The record entered the Wire on .

Career profile: Tim McKnight on CISO Spotlights ↗

Board oversight: Merck's April 8, 2026 proxy statement names the Audit Committee as overseeing, or receiving reports from, this seat. Full passage on our board committee oversight report. The passage in the proxy statement: “Audit Committee Pamela J. Craig Chair Overview The Audit Committee oversees our accounting and financial reporting processes, as well as our internal controls and audits, and consults with management, the internal auditors, and the independent auditors on, among other items, matters related to the annual audit, the published financial statements, and the accounting principles applied. The Audit Committee has established policies and procedures for the pre-approval of all services provided by the independent auditors and for the approval of the annual internal audit plan as executed by the internal audit organization. The Primary Functions of this Committee are to: Oversee the Company's accounting and financial reporting processes, internal controls, and audits; Appoint, evaluate and retain, and maintain direct responsibility for the compensation, termination, and oversight of the Company's independent auditors, including evaluating their qualification, performance, and independence; Oversee the Company's compliance with legal and regulatory requirements, including monitoring compliance with the Foreign Corrupt Practices Act and the Company's policies on ethical business practices and reporting on these items to the Board; Establish procedures for the receipt, retention, and treatment, on a confidential basis, of complaints received by the Company regarding accounting, internal accounting controls, or auditing matters; Oversee the Enterprise Risk Management process; Regularly meet with the Chief Information Officer regarding the Company's information technology and have primary responsibility for Board oversight of the Company's cybersecurity risk management program managed by the Chief Information Security Officer.”

What Merck tells the SEC

Its fiscal 2025 Form 10-K, filed February 24, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Tracked by the Wire since May 1, 2026 · 1 recorded move · every claim links to a sourced record · Updated

Where Merck appears on the record (3)

Every page on CISO Tribune and its network that carries this company, 3 in all.

On the Wire
SEC filing
Career profile

About Merck

CISO Tribune's Leadership Bench files Merck under Healthcare and North America. The SEC classifies it under standard industrial classification 2834, Pharmaceutical preparations, and EDGAR lists its ticker as MRK. The Wire has one security-leadership move at Merck on record, announced in May 2026.

What Merck's 10-K says about security governance

Merck's fiscal 2025 Form 10-K, filed February 24, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

  • Top security role, as the filing names it: Chief Information Security Officer.

  • Board oversight: the Audit Committee.

    “The information security program is regularly evaluated by internal and external consultants and auditors with the results of those reviews reported to senior management and the Audit Committee, which is comprised entirely of independent directors and has oversight responsibility for these risks.”

  • Experience of the security leadership, as the filing states it:

    “The Company's interim CISO has over 22 years of experience in cybersecurity and national security, including distinguished service in the U.S. Army and the National Security Agency.”

  • Material incidents: the filing states none.

    “To date, the risks posed by such cybersecurity threats have not materially affected the Company and its business strategy, results of operations and financial condition, and as of the date of this report, the Company is not aware of any material risks from cybersecurity threats that are reasonably likely to do so, but there can be no assurance that the Company will not be materially affected by such risks in the future.”

Plain-English reading and full text of the filing · the filing on sec.gov

Security leadership timeline

2026-05

Tim McKnight named Senior Vice President, IT Risk Management & Security and Chief Information Security Officer at Merck

Merck appointed Tim McKnight as Senior Vice President, IT Risk Management & Security and Chief Information Security Officer, announced in May 2026; day-level precision has not been established from available coverage.

Security chiefs at other Healthcare organizations

Other organizations CISO Tribune files under Healthcare with a named security chief on record: those in North America first, in alphabetical order from Merck onward.

The full Healthcare bench

Questions CISOs ask about Merck

Who is the CISO of Merck?
Tim McKnight is the current Senior Vice President, IT Risk Management & Security and Chief Information Security Officer of Merck on CISO Tribune's record, appointed in May 2026.
How many security-leadership moves has CISO Tribune tracked at Merck?
CISO Tribune has tracked 1 move at Merck since May 1, 2026.
When was Tim McKnight appointed at Merck?
Tim McKnight's appointment as Senior Vice President, IT Risk Management & Security and Chief Information Security Officer of Merck was announced in May 2026, per CDO Magazine.
Who are the security chiefs at other Healthcare organizations?
On CISO Tribune's record they include Srini Uppugonduri at Novant Health, Mike Farrow at Ohio State University Wexner Medical Center, Michael McNeil at Omnicell and Tim McKnight at UnitedHealth Group.
Which board body oversees cybersecurity at Merck?
Merck's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit Committee. Its proxy statement filed April 8, 2026 names the Audit Committee as overseeing, or receiving reports from, the security seat.

Related guides