Manufacturing CISO: IT/OT Security & AI Governance

Mission Critical Group; Tempe (AZ); On-site; USD 180,000 - 260,000; Full time

Job summary

Mission Critical Group is seeking a Chief Information Security Officer to lead enterprise cybersecurity for a multi-site manufacturing organization. The role partners with executives to protect IT/OT, ICS, and cloud platforms while enabling digital transformation.

The ideal candidate will have extensive experience securing IT and OT environments in manufacturing, implementing governance, risk, and compliance programs, and guiding AI governance initiatives.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field.
• 15+ years of progressive IT and cybersecurity leadership experience.
• 8+ years leading enterprise cybersecurity organizations.
• Experience in securing manufacturing environments.
• Experience securing OT environments.
• Experience presenting to executive leadership and Boards.
• Experience leading enterprise incident response.
• Experience managing cybersecurity budgets exceeding $5M.
• Strong knowledge of Microsoft enterprise security technologies.

Responsibilities

• Develop and execute the enterprise cybersecurity strategy aligned with business objectives.
• Present cybersecurity risks, metrics, investment strategies, and emerging threats to executive leadership.
• Build a security-first culture throughout the organization.
• Develop long-term cybersecurity roadmaps supporting mergers, acquisitions, and business growth.
• Lead the enterprise security program including information security governance, cyber risk management, policies and standards, enterprise security architecture, third-party risk management, data governance, AI governance, security awareness, and vulnerability management.
• Develop security scorecards and executive dashboards to measure organizational risk.
• Lead security initiatives protecting ICS, SCADA, PLC networks, MES, robotics, IoT devices, plant networks and building automation systems.
• Oversee IT infrastructure security areas such as Microsoft 365, Azure, AD/Entra ID, PAM, EDR, SIEM/SOAR, email security, cloud security, DLP, network security, VPN, firewalls, and secure remote access.
• Ensure compliance with CSF, NIST SPs, ISO 27001, SOC 2 Type II, CIS Controls, ITAR, DFARS, GDPR, CCPA, PCI-DSS, HIPAA.
• Establish enterprise processes for cyber risk assessments, business impact analysis, risk register management, vendor security reviews, penetration testing, and security architecture reviews.
• Lead Security Operations Center, incident response, threat hunting, threat intelligence, digital forensics, vulnerability management, patch governance, monitoring, identity monitoring, and endpoint protection.
• Lead business continuity and disaster recovery programs including tabletop exercises and executive simulations.
• Develop enterprise data protection strategies covering IP, CAD files, ERP data, manufacturing data, customer data, financial data, and supplier information.

Skills

Leadership

Strategic planning

Cyber risk management

Board communication

Manufacturing cybersecurity

OT/ICS security

Crisis leadership

Regulatory compliance

Enterprise architecture

Cloud security

AI governance

Vendor negotiations

Team development

Financial management

Change leadership

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field

Tools

Microsoft enterprise security technologies

Job description

Mission Critical Group is seeking a Chief Information Security Officer to lead enterprise cybersecurity for a multi-site manufacturing organization. The role partners with executives to protect IT/OT, ICS, and cloud platforms while enabling digital transformation.

The ideal candidate will have extensive experience securing IT and OT environments in manufacturing, implementing governance, risk, and compliance programs, and guiding AI governance initiatives.