Bertrum Carroll

Bertrum Carroll is Nevada's State Chief Information Security Officer, joining the Office of Information Security and Cyber Defense within the Governor's Technology Office in March 2026.

Career path

Carroll's record combines a long military career with private-sector security leadership. StateScoop reports he spent eight-and-a-half years at the workers' compensation insurance firm Employers, where he was CISO and a vice president, and that his resume includes other private-sector IT jobs at General Electric and Rockwell Automation, with much of his career in the Army, where he spent 27 years before retiring as a lieutenant colonel.

The state's own announcement describes more than a decade of executive cybersecurity leadership, including service as a vice president and chief information security officer overseeing security strategy, enterprise risk management and regulatory compliance, and says he has led large-scale security operations, built high-maturity cybersecurity programs and helped secure both consumer-facing and mission-critical systems.

He is a Certified Internal Controls Architect and holds CISSP, CISM, CISA, CIPP/US, ISO 27001 Lead Auditor and ISO 42001 Auditor credentials, along with master's degrees in electrical engineering and administration, a graduate certificate in cybersecurity and a bachelor's degree in computer science.

Public statements on the role

Describing his approach to the new post, Carroll said: "Cybersecurity is not about chasing perfection. It is about managing risk in a deliberate, responsible way that protects public trust."

He also linked security governance to the state's growing use of artificial intelligence, saying leaders must weigh the technology itself alongside governance, workforce training, vendor expectations and the responsible use of data.

Carroll said his early priority in the role is to listen, learn and understand the state's most important risks before setting direction, and that the opportunity in front of Nevada is wide open, calling good security leadership an obligation to serve and protect the public's data.

The two sources reviewed do not give exact start or end dates for his individual private-sector postings beyond the years-of-service totals quoted above.