Roger Brotz is Vice President and Chief Information Security Officer at Acadia Healthcare, a leading behavioral health system. He brings more than 40 years of experience in information technology and security, including 30 years focused on healthcare, and is known for building cybersecurity programs in complex, highly regulated environments.
At Acadia, Roger leads security strategy across a distributed, multi-site organization. His work includes zero trust architecture, network segmentation, identity and access management, ePHI protection, and HIPAA compliance. He regularly translates cyber risk into business and patient safety priorities for executive leadership and the board.
Before joining Acadia, Roger held senior cybersecurity roles at Community Health Systems and Aurora Health Care and also ran his own consulting practice. Over the course of his career, he has built multiple security programs aligned to frameworks such as NIST CSF and HIPAA, improving cyber maturity, audit readiness, and resilience.
Roger also founded the Nashville CISO Collective, a peer community for security leaders in the region, and remains active in ISACA, ISSA Middle Tennessee, and national CISO networks. A frequent speaker and podcast guest, he has earned several industry honors and will appear in the upcoming documentary Midnight in the War Room. He holds a B.S. from Western Governors University and more than 21 professional certifications.