Skip to content
CISO Spotlights

Board cybersecurity-expertise record

Nutanix: six directors named with cybersecurity expertise

Nutanix's 2025 proxy names six directors, including CEO Rajiv Ramaswami and former Intel CTO Greg Lavender, with cybersecurity expertise or oversight.

Company
Nutanix, Inc. (NTNX)
Directors named
Eric K. Brandt, Craig Conway, Virginia Gambale, Greg Lavender, Rajiv Ramaswami, Gayle Sheppard
Filing
DEF 14A
Filed
22 October 2025

By the CISO Spotlights Desk · Published

Nutanix's proxy statement for its 2025 annual meeting, filed October 22, 2025, names six directors whose listed skills and experience include cybersecurity — the largest number of any company on this record so far.

Eric K. Brandt has served on the board's audit, compensation, finance and cybersecurity committees; he was previously CFO of Broadcom Corporation (2007 to 2016) and of Allergan. Craig Conway's "exposure to cybersecurity, customer engagement, and regulated industries" is cited alongside his tenure as President and CEO of PeopleSoft (1999 to 2004).

Virginia Gambale, the board's Independent Chair since 2021 and Managing Partner of Azimuth Partners, brings "expertise in enterprise technology, cybersecurity, and corporate governance," per the filing, drawing on her earlier role as CIO and Managing Director at Merrill Lynch.

Greg Lavender, Intel's Chief Technology Officer from November 2023 to June 2025 and earlier CTO of VMware, has responsibilities spanning cybersecurity, distributed systems and enterprise IT architecture, per the filing.

CEO Rajiv Ramaswami, who has led Nutanix since December 2020 after serving as VMware's COO of Products and Cloud Services, is cited for "supporting the Board's understanding of cybersecurity and infrastructure resilience." Gayle Sheppard, interim chair of the board's Security and Privacy Committee and former CEO of Bright Machines, has a background in global sales, cybersecurity and regulated industry transformation, per the filing.

No SEC rule requires naming a director's cybersecurity background this way: a 2022 proposal to add Item 407(j) of Regulation S-K was dropped from the SEC's final 2023 cybersecurity-disclosure rule. Nutanix's proxy does it for six of its directors, more broadly than most companies on this record. See the board cybersecurity-expertise record for the others, with no comparison or ranking implied.

Sources

  1. 1.
    Nutanix, Inc., Schedule 14A (SEC EDGAR)sec.gov · published 22 October 2025 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.

See an error? Request a correction.