Strategic CISO: AI Security, Data Privacy & Risk

Simon Property Group; Indianapolis (IN); On-site; USD 250,000 - 420,000; Full time

Job summary

Simon Property Group, based in Indianapolis, seeks a strategic CISO to lead enterprise cybersecurity, cyber-risk and data privacy. You will report to the CTO, with access to the Audit Committee and board, guiding security across property operations and digital platforms.

You will build a risk-based security program, oversee 24x7 operations, and drive AI governance while collaborating with Legal, Finance and Operations to align security with business goals.

Qualifications

• 15+ years in IT and security with 7+ years in senior leadership.
• Experience building an enterprise security program in a large, multi-site organization.
• Experience presenting cyber risk to a Board.
• Hands-on leadership through significant security incidents.
• Experience securing operational technology/IoT and cloud environments.
• Knowledge of GenAI, NIST CSF, ISO 27001, and PCI DSS.
• Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus.

Responsibilities

• Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board.
• Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses.
• Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people.
• Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters.
• Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance.
• Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery.
• Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business.
• Build a high-performing team and a security culture that changes everyday behavior.

Skills

Strategic security leadership

Board-level communication

Security program management

Incident response leadership

GenAI governance

Education

CISSP

CISM

CISA

CRISC

Job description

Simon Property Group, based in Indianapolis, seeks a strategic CISO to lead enterprise cybersecurity, cyber-risk and data privacy. You will report to the CTO, with access to the Audit Committee and board, guiding security across property operations and digital platforms.

You will build a risk-based security program, oversee 24x7 operations, and drive AI governance while collaborating with Legal, Finance and Operations to align security with business goals.