Chief Information Security Officer (CISO)

Bestmansolutions; Houston (TX); Hybrid; USD 180,000 - 320,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Target bonus 20–35%

401(k) with employer contribution

Executive PTO & holidays

Hybrid working flexibility

Professional development support &Cert

Job summary

Bestmansolutions seeks a Chief Information Security Officer to lead and modernise cybersecurity for a Houston-based power and utilities operator with critical infrastructure. The role spans IT and OT/ICS, including board-level reporting and risk-informed decision-making.

The successful candidate will drive a modern security program, embed security into operations, and manage the security budget while meeting regulatory demands. Hybrid work flexibility is offered.

Qualifications

• Experience leading cybersecurity across IT and OT/ICS environments in regulated sectors.
• Practical understanding of SCADA and industrial control system security.
• Experience engaging with Boards and executive committees; translating risk into business impact.
• Track record of modernising security programmes without disrupting core operations.

Responsibilities

• Owning and executing the enterprise cybersecurity strategy across IT and OT/ICS environments, including SCADA, control systems, and field assets.
• Modernising security architecture, tooling, and operating models while maintaining operational continuity.
• Providing regular, clear reporting and risk-based insight to the Audit and/or Risk Committee.
• Leading incident preparedness and response, including tabletop exercises and real-world events.
• Partnering with operational, engineering, and technology leaders to embed security into day-to-day decision-making.
• Managing the cybersecurity budget and prioritising investment based on risk, resilience, and regulatory expectations.
• Ensuring alignment with applicable regulatory, industry, and critical infrastructure security standards.
• This role will suit a senior CISO or deputy CISO with experience operating in regulated, operationally intensive environments.
• We’re looking for someone who:
• Proven experience leading cybersecurity across both IT and OT/ICS environments within power, utilities, or adjacent critical infrastructure sectors.
• A practical understanding of SCADA and industrial control system security, and how it differs from enterprise IT.
• Experience engaging confidently with Boards and executive committees, translating technical risk into operational and business impact.
• A track record of modernising security programmes without disrupting core operations.
• Calm judgement under pressure and credibility with engineers, executives, and regulators alike.

Job description

We are supporting the search for a Chief Information Security Officer to join a Houston-based power and utilities organisation operating critical infrastructure across a complex, regulated environment.This role is designed for an experienced security leader who can modernise an established security programme while maintaining the resilience, reliability, and regulatory discipline required of a utility operator. The CISO will have enterprise-wide accountability for both IT and OT security, with direct engagement at Board and executive level.The RoleThe CISO will lead the evolution of the organisation’s cybersecurity strategy, moving it from a stable but dated footing to a modern, risk-informed, and operationally aligned security capability.You will:

• Owning and executing the enterprise cybersecurity strategy across IT and OT/ICS environments, including SCADA, control systems, and field assets.
• Modernising security architecture, tooling, and operating models while maintaining operational continuity.
• Providing regular, clear reporting and risk-based insight to the Audit and/or Risk Committee.
• Leading incident preparedness and response, including tabletop exercises and real-world events.
• Partnering with operational, engineering, and technology leaders to embed security into day-to-day decision-making.
• Managing the cybersecurity budget and prioritising investment based on risk, resilience, and regulatory expectations.
• Ensuring alignment with applicable regulatory, industry, and critical infrastructure security standards.

This role will suit a senior CISO or deputy CISO with experience operating in regulated, operationally intensive environments.We’re looking for someone who:

• Proven experience leading cybersecurity across both IT and OT/ICS environments within power, utilities, or adjacent critical infrastructure sectors.
• A practical understanding of SCADA and industrial control system security, and how it differs from enterprise IT.
• Experience engaging confidently with Boards and executive committees, translating technical risk into operational and business impact.
• A track record of modernising security programmes without disrupting core operations.
• Calm judgement under pressure and credibility with engineers, executives, and regulators alike.

Compensation & BenefitsThe firm offers a competitive executive compensation package, including:

• Comprehensive medical, dental, and vision coverage.
• 20–35% target bonus
• 401(k) plan with employer contribution.
• Executive-level paid time off and paid holidays.
• Hybrid working flexibility.
• Support for ongoing professional development and industry certifications.