HITRUST Names Veteran Cybersecurity Leader as Its New CEO

Frisco-based cybersecurity certification provider HITRUST has appointed Gregory Webb as CEO to drive the company’s next phase of “growth, customer success, and continued market leadership,” the company said.

HITRUST said that founder Daniel S. Nutkis will transition to executive chairman and will continue to guide market strategy and research, thought leadership, and innovation.

“HITRUST has defined the gold standard for modern security assurance,” Nutkis said in a statement. “We remain committed to delivering the industry’s leading framework portfolio—integrating threat-adaptive assessments with operational tools to drive efficiency, reduce risk, and simplify programs. I’m thrilled to welcome Gregory, whose leadership and operational expertise will advance our mission for customers, assessors, and partners.”

HITRUST said Webb brings more than 20 years of experience in cybersecurity, information technology, and compliance across go-to-market, customer success, and engineering. Most recently, Webb was CEO and board chairman of AppViewX, leading its growth journey.

His prior leadership roles include Venafi (acquired by CyberArk) and Bromium (acquired by HP).

HITRUST said that customers, partners, and assessors won’t experience any changes to existing programs or support.

Since 2007, the company said it has set the standard for trusted, certifiable assurance solutions that manage a broad spectrum of information, cyber, third-party, and AI risks.

Webb’s focus will include industry engagement, market expansion, and accelerating adoption of HITRUST’s core assurance and Third-Party Risk Management (TPRM) offerings, the company said.

“I’m honored to join HITRUST,” Webb said. “With cyber threats evolving rapidly, organizations need adaptive, certifiable assurance. HITRUST is uniquely positioned as a neutral, credible standards-setter. We will ensure continuity for our stakeholders while expanding HITRUST’s leadership in cybersecurity and TPRM.”

HITRUST is the leader in cybersecurity assurance used in risk management and compliance, offering certification programs for the application and validation of security, privacy, and AI controls.