Company record
SpartanNash CISO: Brett Hoffman
The current VP and Chief Information Security Officer of SpartanNash, as tracked by CISO Tribune, is Brett Hoffman, whose appointment was announced on August 11, 2025 (PR Newswire (company announcement)). Previously Vice President, Enterprise Security Solutions and CISO at Inspire Security Solutions. Read the record. The record entered the Wire on .
What SpartanNash tells the SEC
Its fiscal 2024 Form 10-K, filed February 26, 2025, carries an Item 1C cybersecurity disclosure that describes a Director of Cybersecurity & Architecture reporting to the Chief Information Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since August 11, 2025 · 1 recorded move · every claim links to a sourced record · Updated
Where SpartanNash appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2024 · Item 1C, filed February 26, 2025
About SpartanNash
CISO Tribune's Leadership Bench files SpartanNash under Retail & Consumer and North America. The SEC classifies it under standard industrial classification 5141, Wholesale-groceries, general line, and EDGAR lists its ticker as SPTN. The Wire has one security-leadership move at SpartanNash on record, announced on August 11, 2025.
What SpartanNash's 10-K says about security governance
SpartanNash's fiscal 2024 Form 10-K, filed February 26, 2025, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Reporting line: the Director of Cybersecurity & Architecture reports to the Chief Information Officer.
“The Information Security function is led by the Company's Director of Cybersecurity & Architecture, under the direction of the Chief Information Officer ("CIO") .”
Board oversight: the Audit Committee.
“The Company's Board of Directors ("Board") has appointed the Audit Committee to assist the Board in fulfilling its responsibilities with respect to the oversight of cybersecurity, data security, privacy programs, and the Company's response to security breaches.”
How often the board or committee hears about it: at least quarterly.
“The CIO provides at least quarterly updates to the Audit Committee on the Cybersecurity program , which include a current evaluation of the Company's maturity within the National Institute of Standards and Technology ("NIST") framework, including assessments against key performance indicators, updates on internal phishing campaigns, tabletop exercises conducted at various levels of the organization including with representation from the Audit Committee , and management training.”
Frameworks and standards the filing names: NIST Cybersecurity Framework and CIS Controls.
Experience of the security leadership, as the filing states it:
“The Company's cybersecurity management team includes members with relevant cybersecurity experience who hold cybersecurity certifications.”
Material incidents: the filing states none.
“As of the effective date of this filing, the Company is currently not aware of any known or potential cybersecurity threats that are reasonably likely to materially affect the Company's business strategy, results of operations, or financial conditions.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security chiefs at other Retail & Consumer organizations
Other organizations CISO Tribune files under Retail & Consumer with a named security chief on record: those in North America first, in alphabetical order from SpartanNash onward.
Target: Rich Agostino, Senior Vice President, Chief Information Security Officer & Infrastructure.
Toast: Tony Arous, Chief Information Security Officer.
Walmart: Jerry R. Geisler III, Executive Vice President and Chief Information Security Officer.
AutoNation: Brian Fricke, Chief Information Security Officer (CISO).
Coca-Cola: Derek Benz, Senior Vice President and Chief Information Security Officer.
Marriott International: Daniel Dubowski, Senior Vice President and Chief Information Security Officer.
Nike: Adam Zoller, Chief Information Security Officer (CISO).
PENN Entertainment: Gary Hunter, Chief Information Security Officer.
Questions CISOs ask about SpartanNash
- Who is the CISO of SpartanNash?
- Brett Hoffman is the current VP and Chief Information Security Officer of SpartanNash on CISO Tribune's record, appointed on August 11, 2025.
- How many security-leadership moves has CISO Tribune tracked at SpartanNash?
- CISO Tribune has tracked 1 move at SpartanNash since August 11, 2025.
- When was Brett Hoffman appointed at SpartanNash?
- Brett Hoffman's appointment as VP and Chief Information Security Officer of SpartanNash was announced on August 11, 2025, per PR Newswire (company announcement).
- Where did Brett Hoffman work before becoming VP and Chief Information Security Officer of SpartanNash?
- The record of the appointment gives Brett Hoffman's previous role as Vice President, Enterprise Security Solutions and CISO at Inspire Security Solutions.
- Who are the security chiefs at other Retail & Consumer organizations?
- On CISO Tribune's record they include Rich Agostino at Target, Tony Arous at Toast, Jerry R. Geisler III at Walmart and Brian Fricke at AutoNation.
- Who does the security chief of SpartanNash report to?
- SpartanNash's fiscal 2024 Form 10-K, filed February 26, 2025, says its Director of Cybersecurity & Architecture reports to the Chief Information Officer.
- Which board body oversees cybersecurity at SpartanNash?
- SpartanNash's fiscal 2024 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.