Skip to content
CISO Spotlights

Career profile

Robert Carvajal

chief information security officer, BayCare Health System

Status
Current role, per sources checked 14 August 2026
Appointed
16 February 2026
Published

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

Robert Carvajal is the chief information security officer of BayCare Health System, appointed in February 2026.

Career path

Before moving into the CISO role, Carvajal served as BayCare's director of Information Services security and threat management, where he led enterprise security operations, incident response and threat intelligence efforts.

He brings more than 20 years of information technology experience, including nearly two decades focused on cybersecurity leadership.

BayCare announced his appointment as CISO on February 16, 2026, tasking him with leading the health system's cybersecurity strategy and overseeing information security governance across the organization.

In the role, Carvajal works closely with executive leadership to support BayCare's technology strategy and digital health initiatives, and oversees multiple teams alongside clinical and operational leaders.

Current remit

As of August 2026, Carvajal leads the enterprise cybersecurity strategy for BayCare, a 16-hospital academic health system based in Clearwater, Florida.

His program spans IT risk management, business resiliency, incident response and threat intelligence, and is aligned with regulatory frameworks including the Health Insurance Portability and Accountability Act and National Institute of Standards and Technology guidance.

He advances proactive threat mitigation through policy development, enterprisewide security awareness efforts and the implementation of advanced technologies.

Carvajal also mentors cybersecurity professionals and serves as a strategic advisor to leaders across BayCare.

Education and credentials

Carvajal holds a Bachelor of Science in Criminal Justice from Northeastern University and maintains the Certified Information Systems Security Professional credential, among other industry certifications.

In his own words

On taking the CISO role, Carvajal said, "I'm honored to step into this role at an organization that puts trust, dignity and patient care at the center of everything it does."

Sources

  1. 1.
    baycare.orgbaycare.org · undated page · checked 25 October 2026 · tier A
  2. 2.
    Becker's Hospital Review | Healthcare News & Analysisbeckershospitalreview.com · published 14 August 2026 · checked 25 October 2026 · tier B
  3. 3.
    Becker's Hospital Review | Healthcare News & Analysisbeckershospitalreview.com · published 17 February 2026 · checked 25 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.