NRC Health’s Jen Spencer Named to CISOs Connect’s Prestigious DC100 List

NRC Health is proud to announce that Jen Spencer, Vice President of Privacy Compliance, has been named to the DC100 Awards—a prestigious recognition from CISOs Connect honoring the top 100 Deputy CISOs and second-in-command cybersecurity executives across industries. This award celebrates leaders who are shaping the future of cybersecurity through strategic vision, operational excellence, and cross-functional leadership.

The DC100 Awards are part of CISOs Connect’s respected portfolio of merit-based recognitions, which also includes the C100 and A100 awards. These honors are designed to spotlight cybersecurity professionals who are not only supporting enterprise security strategy but actively building and operationalizing it. Jen Spencer’s inclusion in this elite group reflects her outstanding contributions to cybersecurity, privacy, and risk management at NRC Health.

Jen leads NRC Health’s cybersecurity and privacy compliance initiatives with a focus on HITRUST certification, AI security, HIPAA privacy, and governance, risk, and compliance (GRC). Her strategic oversight ensures that NRC Health maintains a resilient security posture while supporting innovation in healthcare technology. 

“Today’s Deputy CISOs and their equivalent security leaders are the strategic architects behind our industry’s most critical security initiatives,” said Frank Aiello, DC100 judge and CISO at Maximus. “They don’t just support the CISO vision—they build it, operationalize it, and mentor the next generation. The DC100 winners exemplify the leadership our industry needs right now.”

As Vice President of Privacy Compliance, Jen oversees a wide range of cybersecurity responsibilities at NRC Health. Her work includes: 

• Managing HITRUST and AI security certifications 
• Ensuring compliance with HIPAA and other privacy regulations 
• Leading GRC strategy and operational oversight 
• Overseeing budgetary planning for cybersecurity initiatives 
• Supporting vendor management through third-party risk assessments 
• Chairing the AI Data Governance and Risk Committee 

Jen’s leadership ensures that NRC Health remains at the forefront of cybersecurity innovation while maintaining the highest standards of privacy and compliance.  

Her work directly supports NRC Health’s mission of Human Understanding, helping healthcare organizations build trust with the patients and communities they serve.

Jen brings a wealth of experience to her role at NRC Health. Prior to joining the organization, she served as the Chief Information Officer (CIO) and Chief Privacy and Security Officer (CPSO) for the Rochester RHIO, where she executed many of the same functions she now leads at NRC Health. 

In addition to her professional achievements, Jen has been an adjunct professor for over 20 years at the Rochester Institute of Technology (RIT). She has taught in the executive MBA strategy program, the liberal-arts public-policy program, and the Golisano cybersecurity and ethics program.  

Jen’s commitment to education and mentorship has helped shape the next generation of cybersecurity professionals and public-policy leaders. 

Industry Recognition and Certifications 

Jen’s work has earned her numerous accolades, including: 

• CSO Award in AI Innovation from Foundry 
• First-place winner in Columbia University’s Business Plan Competition 
• Regional Winner in the New York State Business Plan Competition 
• Women We Admire Top Women Leaders in 2025 

She holds more than 15 industry certifications from leading organizations such as SANS, ISACA, IAPP, and Shared Assessments, covering areas like AI, audit, security, privacy, risk, and governance. 

Jen is also an active member of InfraGard, where she was accepted into the FBI CISO Academy, and Women in Bio, where she has presented on allyship in STEM and the life sciences. She has also spoken at HIMSS on interoperability, further demonstrating her thought leadership in healthcare cybersecurity. 

Advocacy and Community Engagement

Beyond her professional and academic achievements, Jen is deeply committed to advocacy for individuals with developmental disabilities. Her work through the Leadership Education in Neurodevelopmental Disabilities (LEND) Fellowship led to opportunities with OPWDD, including serving on the Family Support Services and Monroe County’s Mental Health Subcommittee. 

She is also a certified housing navigator and certified workforce incentive practitioner, helping families navigate complex systems to access essential services. 

The DC100 Awards represent a commitment to recognizing the unsung heroes of cybersecurity. These Deputy CISOs and second-in-command leaders are the bridge between tactical execution and strategic vision. They manage complex risk portfolios, build resilient security cultures, and mentor the next generation of cybersecurity talent. 

“Recognizing our Deputy CISOs is essential to building a resilient security culture,” said Rushton James, VP & CISO at Liberty Dental Plan and DC100 judge. “These leaders work tirelessly behind the scenes to operationalize strategy, manage risk, and drive innovation. The DC100 celebrates those who turn vision into execution and elevate cybersecurity across the enterprise.” 

Jen’s recognition in the DC100 reflects her leadership, innovation, and unwavering dedication to cybersecurity excellence. At NRC Health, we are honored to celebrate her achievements and proud to have her guiding our privacy and security strategy. 

“It’s an incredible honor to be recognized among such a talented group of cybersecurity leaders,” said Jen. “At NRC Health, we believe that privacy and security are foundational to building trust with our customers and partners. I’m proud to work alongside a team that’s committed to innovation, resilience, and protecting the integrity of the data that drives Human Understanding.” 

Explore the full list of DC100 winners here.