VP & CISO, Oracle Health and Global Industries
Security executive with 25+ years across two Fortune-ranked CISO seats, spanning healthcare, cloud, and regulated industries. Active advisor to enterprise security and executive protection portfolios.
Jason Barnett has spent 25+ years building and leading enterprise security programs at Fortune 50 scale. He currently serves as VP & CISO for Oracle Health and Global Industries, owning global security strategy, operations, product security, compliance, and customer trust across Oracle's Global Industry Units — financial services, communications, utilities, retail, and hospitality — alongside the healthcare technology portfolio formerly known as Cerner.
Before Oracle, Jason was Chief Security Officer at HCA Healthcare (Fortune 61), where he ran a 400-person global team and a $300M annual budget protecting 335,000 employees and 35 million patient encounters per year. He led security for the $2B EHR migration to Google Cloud and co-authored the U.S. Health Sector Coordinating Council five-year cybersecurity strategy.
His credentials run across enterprise security architecture, product security, and global regulatory compliance — SOC 1/2/3, ISO 27001, PCI, and DoD federal enclave requirements, alongside the healthcare-specific frameworks (HIPAA, HITRUST CSF, HHS 405(d), NIST CSF 2.0). Regulatory engagement spans HHS/OCR, FBI, and CISA. He serves on advisory boards for VanishID (executive privacy), CORL Technologies / Meditology Services (healthcare TPRM), and Pindrop (voice fraud detection).
Owns global security strategy, operations, product security, and compliance across Oracle's Global Industry Units and its healthcare technology portfolio. Reports to Oracle's Global CSO.
Owns global compliance programs spanning SOC 1/2/3, ISO 27001/2/17/18, BSI C5, IRAP, ENS, NHS, HDS, DoD federal enclave, and the healthcare set (HIPAA, HITRUST CSF, HHS 405(d), NIST CSF 2.0) — coordinated with EY, Schellman, Coalfire, and BDO across U.S., EMEA, and APAC.
Leads AI transformation inside Oracle Health, embedding security and privacy into AI-enabled products. Co-founded HCA's Responsible AI Committee. Built medical device (IoMT) security programs at both Oracle and HCA.
Fortune 61. Led a 400-person global team and $300M annual budget protecting 335,000 employees and 35M annual patient encounters. Chair, HCA Cybersecurity Council. Co-author, U.S. Health Sector Coordinating Council five-year cyber strategy.
Cyber Defense Magazine
Nashville Technology Council
Becker's Hospital Review
Agentic AI-powered protection for executives and enterprise leadership. Backed by Dell Technologies Capital.
Healthcare-specific TPRM platform serving payors and providers — addressing the post-Change Healthcare third-party risk imperative.
Voice security and deepfake detection for enterprise contact centers and authentication.
Open to speaking, advisory roles, and board engagement. Strongest fit: AI governance, product security, global compliance, and regulated industries.