Chief Information Security Officer

Simon Property Group; Indianapolis (IN); On-site; USD 250,000 - 420,000; Full time

Job summary

Simon Property Group, based in Indianapolis, seeks a strategic CISO to lead enterprise cybersecurity, cyber-risk and data privacy. You will report to the CTO, with access to the Audit Committee and board, guiding security across property operations and digital platforms.

You will build a risk-based security program, oversee 24x7 operations, and drive AI governance while collaborating with Legal, Finance and Operations to align security with business goals.

Qualifications

• 15+ years in IT and security with 7+ years in senior leadership.
• Experience building an enterprise security program in a large, multi-site organization.
• Experience presenting cyber risk to a Board.
• Hands-on leadership through significant security incidents.
• Experience securing operational technology/IoT and cloud environments.
• Knowledge of GenAI, NIST CSF, ISO 27001, and PCI DSS.
• Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus.

Responsibilities

• Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board.
• Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses.
• Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people.
• Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters.
• Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance.
• Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery.
• Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business.
• Build a high-performing team and a security culture that changes everyday behavior.

Skills

Strategic security leadership

Board-level communication

Security program management

Incident response leadership

GenAI governance

Education

CISSP

CISM

CISA

CRISC

Job description

Job Location: Corporate Indianapolis Simon Property Group is seeking a strategic, business-focused CISO to lead the company’s enterprise cybersecurity, cyber-risk, and data privacy program, safeguarding the systems, data, digital platforms, and property operations critical to our business. This position reports to the Chief Technology Officer, has direct access to the Audit Committee, and is based at our corporate headquarters in Indianapolis.

Principal Responsibilities

• Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board
• Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses
• Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people
• Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters
• Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance
• Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery
• Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business
• Build a high-performing team and a security culture that changes everyday behavior

Minimum Qualifications

• 15+ years in IT and security, including 7+ years in senior security leadership
• Experience building an enterprise security program in a large, multi-site organization
• Experience presenting cyber risk to a Board
• Hands-on leadership through significant security incidents
• Experience securing operational technology/IoT and cloud environments
• Knowledge of securing GenAI, NIST CSF, ISO 27001, and PCI DSS
• Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus
• Executive presence, sound judgment under pressure, and a pragmatic, business-enabling approach matter as much as technical depth

Simon® is a real estate investment trust engaged in the ownership of premier shopping, dining, entertainment and mixed-use destinations (Simon Property Group, NYSE: SPG). Our properties across North America, Europe and Asia provide community gathering places for millions of people every day and generate billions in annual sales. In addition to our high quality properties, Simon is also known for our strong balance sheet, a long-tenured and well-respected senior management team, and our innovative spirit, as reflected in a 50 + year history of successful retail real estate development, management, and leasing. Simon was named Fortune’s Most Admired Real Estate Company eight times. We have experienced an explosion of growth and innovation unprecedented in the industry and we look forward to Simon's future.

Equal Employment Opportunity

Simon is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. If you require assistance or need to request an accommodation due to a disability, please email [e-mail]. Please note this email is intended only for accommodation requests related to the application and interview process. Any other correspondence will not receive a response.