Skip to content
CISO Spotlights

Career profile

Alan Rosa

Chief Information Security Officer and SVP, Infrastructure and Operations, CVS Health

Status
Current role, per sources checked 19 May 2026
Appointed
Not stated in the sources
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

Alan Rosa is CVS Health's chief information security officer and SVP of infrastructure and operations, a dual role that Cisco's own newsroom used to introduce him on stage at Cisco Live in June 2025.

Career path

Rosa's first job protecting anything was in uniform: he told IT Brew his entry point into the field was as a watch guard in the Navy, followed by general technology work at Boeing Defense, Space & Security after college.

It took a decade into his career before he landed his first formal security role; since then he has held leadership positions at NBCUniversal, Madison Square Garden Entertainment and Disney.

Before CVS Health, one of his most memorable postings was as CISO of Twitter during the company's 2022 acquisition by Elon Musk, an experience he said taught him how the law works and how the FTC thinks.

He joined CVS Health in 2023, a company he described to IT Brew as effectively three Fortune 50 businesses combined: retail pharmacy and consumer wellness, the Caremark pharmacy benefit manager, and the Aetna health insurance arm.

Current focus: modernization and AI

On joining, Rosa said his early mandate was keeping systems in a state of operational stability so the company could keep serving its members, patients and customers.

His current focus has shifted to modernizing CVS Health's cybersecurity program, building what he calls a comprehensive enterprise AI program, and keeping colleagues trained on current technology while modernizing the company's applications.

At Cisco Live, Rosa described his teams as moving past traditional workloads by embedding AI capabilities into CVS Health's network fabric while applying "a security lens to all of it."

Sources

  1. 1.
    IT Brewitbrew.com · published 19 May 2026 · checked 27 September 2026 · tier B
  2. 2.
    Cisconewsroom.cisco.com · published 23 June 2025 · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.