SVP/CISO Cyber and Product Security

West Coast Energy Systems; Waukesha (WI); On-site; USD 350,000 - 650,000; Full time

Job summary

Generac is seeking a Senior Vice President Cybersecurity (Chief Information Security Officer) to lead its global cybersecurity organization. The CISO partners with the CIO, executive leadership, product engineering, manufacturing operations, and external partners to protect the enterprise and its products.

This role owns the multi-year security roadmap, oversees security operations, governance, risk and compliance, and product/IoT security, ensuring measurable reductions in cyber risk across IT,

Responsibilities

• Defines and executes a multi-year enterprise cybersecurity strategy.
• Advises CIO and Board on cyber risk and investments.
• Owns product security across connected products and IoT ecosystems.

Job description

We believe power is a promise - a shared commitment to be there for others when it matters most.

For more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.

Ready to Power a Smarter World with us?

The Senior Vice President Cybersecurity (Chief information Security Officer - CISO) leads Generac's global Cybersecurity organization, partnering with the CIO, executive leadership, product engineering, manufacturing operations, business stakeholders, and external partners to protect the enterprise and its products.

This role is responsible for the strategy, leadership, and execution of Generac's global cybersecurity and product security programs. Reporting to the Chief Information Officer, the CISO owns the enterprise security vision and multi-year roadmap, protecting Generac's information assets, global manufacturing operations, connected products, and digital ecosystem against an evolving threat landscape. This leader brings a clear, experience-based view of what good looks like in a Fortune 500 industrial and manufacturing environment and is accountable for measurable reduction of cyber risk across IT, OT, and product domains.

The CISO leads a global organization spanning security operations, cybersecurity engineering, governance risk and compliance, product and IoT security, and OT/ICS security for manufacturing environments. The role requires an accomplished executive who has built and scaled high performing security teams, matured enterprise security programs in complex industrial settings, and can represent cybersecurity credibly to the executive leadership team, the Board of Directors, customers, and regulators.

Major Responsibilities

• Defines and executes a multi-year enterprise cybersecurity strategy and roadmap aligned to business objectives and benchmarked against Fortune 500 industrial and manufacturing peers, translating a clear view of what good looks like into prioritized, funded initiatives.
• Serves as the senior-most cybersecurity executive, advising the CIO, executive leadership team, and Board of Directors on cyber risk posture, investment priorities, and emerging threats.
• Models enterprise-first leadership by partnering across business units, functions, and regions to balance risk, speed, operational continuity, and business growth.
• Owns the product security program for Generac's connected products, energy technology platforms, and IoT ecosystems, embedding secure by design and secure development lifecycle practices across product engineering.
• Establish and lead product security incident response (PSIRT), coordinated vulnerability disclosure, and compliance with emerging product security regulations and standards such as IEC 62443 and the EU Cyber Resilience Act.
• Partners cross-functionally with product engineering, manufacturing, operations, legal, compliance, and business leaders to embed security requirements into business processes, product development, and operational decision-making.
• Leads the security strategy for operational technology and industrial control systems across global manufacturing and distribution facilities, balancing risk reduction with production uptime and safety.
• Establishes IT/OT convergence governance, segmentation and access standards, and incident response readiness tailored to plant floor environments.
• Provides executive oversight of the global security operations center, incident response, threat intelligence, and vulnerability management functions, ensuring around the clock detection and response across internal teams and managed service partners.
• Serves as executive incident commander for material cyber events, directing enterprise response and leading communications with executive leadership, the Board, legal counsel, insurers, and regulators, including SEC materiality assessment and disclosure support.
• Owns the enterprise cyber risk management framework, security policy program, and control environment aligned to NIST CSF, ISO 27001, and applicable regulatory obligations including but not limited to driving certification/ recertification process for applicable products.
• Directs security compliance, audit readiness, SOX-related IT control partnership, and customer assurance activities across global operations.
• Owns the third-party cyber risk management program spanning suppliers, service providers, and technology partners across a global manufacturing supply chain.
• Governs strategic security vendors and managed service providers through defined service levels, performance reviews, and rightsizing internal versus external capabilities.
• Builds, leads, and develops a high performing global security organization, attracting top talent, developing future leaders, and establishing succession depth across security disciplines.
• Defines the security operating model, organizational design, and budget, managing multi-million-dollar progra