Professional Role and Organizational Positioning
Matthew Lathrom currently serves at Government Employees Health Association Inc (GEHA Health) as Vice President, Chief Risk Officer (CRO), and Chief Information Security Officer (CISO). His executive role integrates risk management with information security leadership, positioning him at the confluence of enterprise risk, cybersecurity, and compliance functions within the organization. GEHA is a significant player in health and dental insurance sectors, headquartered in Missouri, with a strong regional presence in Kansas City.
Key Responsibilities and Functional Scope
Matthew’s title explicitly combines VP, CRO, and CISO, indicating oversight of both strategic risk management and information security operations. His scope likely includes enterprise risk assessments, governance frameworks, cybersecurity policies, and regulatory compliance aligned with the healthcare industry’s complex risk environment. The combination of CRO and CISO roles illustrates a comprehensive command over managing financial, operational, and technological risks in a regulated, data-sensitive sector.
Professional Credentials and Certifications
- Certified in Risk Management Assurance (CRMA) – Issued by The Institute of Internal Auditors Inc. in July 2013 (Credential ID: 12335)
- Certified in Risk and Information Systems Control (CRISC)
- Certified Information Security Professional (CISSP) (implied based on consistent references to information security credentials)
These certifications reflect advanced proficiency in risk governance, audit assurance, information systems control, and security best practices, underscoring his capability to align risk strategy with business and technological imperatives at GEHA.
Organizational Impact and Recognition
Matthew is referenced in the 2024 Kansas City Ingram’s 250, spotlighting him among the region’s influential business leaders, validating his leadership role and visibility in the local business community. Additionally, he has been featured in the Kansas City ORBIE® Awards in 2025, an esteemed recognition honoring excellence in information security leadership, further emphasizing his stature in IT risk and security leadership.
Compensation and Executive Standing
According to regulatory filings (IRS Form 990 filings for Government Employees Health Association), Matthew's compensation as Vice President of Technology and Security Services (encompassing CRO and CISO functions) was recorded approximately at $387,383 for recent fiscal periods. This aligns with senior executive remuneration in comparable health insurance organizations and reflects his strategic importance to GEHA’s leadership.
Industry and Regional Context
GEHA is noted as one of the largest health and dental insurers nationally, with substantial involvement in the Kansas City region. The company’s leadership, including Matthew, is recognized for defining business success locally, suggesting significant operational scale and influence in health insurance markets. The company’s involvement with local institutions like GEHA Field at Arrowhead Stadium further indicates community integration, potentially opening opportunities for collaborative security and brand initiatives.
Network and Influence
Matthew maintains a strong professional network with 500+ connections on LinkedIn and 876 followers, primarily within the Kansas City Metropolitan Area, indicative of an established and influential presence. His LinkedIn profile displays active engagement with professional communities centered on risk management and cybersecurity.
Actionable Insights for Engagement
- His dual role as CRO and CISO signifies comprehensive control over enterprise risk and security, making him a critical decision-maker for solutions addressing integrated risk management, cybersecurity resilience, compliance automation, and data protection tailored to healthcare insurers.
- His professional certifications validate a high level of expertise and commitment to industry standards, suggesting receptiveness toward advanced, compliance-aligned risk frameworks and innovative security technologies.
- Presence in regional leadership awards and local business recognition implies engagement in community-oriented initiatives and openness to partnerships that enhance organizational reputation and operational risk posture.
- GEHA’s scale and regional prominence position Matthew as a gatekeeper for initiatives that optimize risk governance and technology security at enterprise scale.
This profile synthesizes all available data into a structured overview of Matthew Lathrom’s role, qualifications, and strategic importance within GEHA Health, emphasizing elements pertinent to leadership in risk and information security within a major health insurer.
