CISO Tribune

CISO departure

Brad Carvellas steps down as Chief Information Security Officer of Guthrie Clinic

By CISO Tribune Editorial · Published · Updated

Brad Carvellas is stepping down as Chief Information Security Officer of Guthrie Clinic, as announced on December 23, 2025.

Records: Guthrie Clinic · Brad Carvellas

PersonBrad Carvellas
RoleChief Information Security Officer
CompanyGuthrie Clinic
AnnouncedDecember 23, 2025
Added to the recordSeptember 30, 2026
SourceGlobeNewswire (company announcement)

Context from the record

  • Guthrie Clinic is filed under Healthcare, North America, on our record.
  • The Guthrie Clinic seat on our record today: Mangoné Fall, Chief Information Security Officer, announced on June 1, 2026.
  • The appointment to this seat after this one on our record: Mangoné Fall, Chief Information Security Officer, announced on June 1, 2026.

Other Healthcare appointments in the fourth quarter of 2025

  • Joseph Adu, Chief Information Security Officer, CentralReach

Who runs security in Healthcare.

What this move signals

The Guthrie Clinic announced that Brad Carvellas moved from his role as Vice President of Cybersecurity and Chief Information Security Officer to become the health system's Senior Vice President and Chief Digital Officer, effective December 21, 2025. Carvellas had held the CISO role at Guthrie since 2020.

What the sources say

In the new role, the company says, Carvellas will oversee all IT operations, drive digital strategy and lead innovation initiatives using data analytics and AI. According to the release, he will also lead the integration of digital solutions supporting patient care, along with technology deployment. The release says Carvellas served as Interim Chief Digital Officer during a national search that preceded the decision.

According to the company, his earlier post was at Highmark Health in Pittsburgh, Pa., where he was Director of Information Security and Risk Management. Carvellas holds a bachelor's degree in Information Systems, earned with distinction at Muhlenberg College in Allentown, Pa., the company says. According to the release, his certifications include FAIR, for Factor Analysis of Information Risk, along with CISM and CISSP.

Carvellas began a term on the Health Information Sharing and Analysis Center's Board of Directors on Dec. 1, 2022, after his election, the company says.

Headquartered in Sayre, Pennsylvania, the non-profit Guthrie Clinic is a multispecialty health system that integrates hospital and clinical care with education and research, according to the release. According to the release, Dr. Donald Guthrie founded the group practice in 1910. The release says Guthrie spans nearly 11,000 square miles in upstate New York and northeastern Pennsylvania, with six hospital campuses and outpatient facilities across 14 counties.

Sources

  1. GlobeNewswire (company announcement)
  2. The Guthrie Clinic Announces New Chief Digital Officer | Guthrie. Guthrie Clinic, read November 10, 2026.
  3. Guthrie Cybersecurity Executive Elected to National Board | Guthrie. Guthrie Clinic, read November 10, 2026.

The Briefing

Every verified CISO move of the week, in your inbox Friday.

Every verified CISO move and one piece of analysis, weekly.

Unsubscribe any time. See the privacy policy.