Chief Information Security Officer
Required skills
- cybersecurity
- cyber-risk
- data privacy
- AI governance
- GenAI
- agentic AI
- non-human identity
- operational technology
- IoT
- shopper platforms
Nice to have
- REIT
- retail
- hospitality
Role summary
Simon Property Group is seeking a strategic, business-focused Chief Information Security Officer (CISO) to lead its enterprise cybersecurity, cyber-risk, and data privacy programs. Reporting to the CTO and with direct access to the Audit Committee, this role is based in Indianapolis. The CISO will set and execute a multi-year security strategy, lead secure AI adoption, protect corporate and operational technology systems, manage data privacy, direct security operations and incident response, and oversee third-party risk. The role requires 15+ years in IT and security, with 7+ years in senior leadership, experience building enterprise security programs in large organizations, and presenting cyber risk to a Board. Experience securing OT/IoT and cloud environments, and knowledge of GenAI, NIST CSF, ISO 27001, and PCI DSS are essential. Public company, REIT, retail, or hospitality experience is preferred.
Job Location:
Corporate IndianapolisSimon Property Group is seeking a strategic, business-focused CISO to lead the company’s enterprise cybersecurity, cyber-risk, and data privacy program, safeguarding the systems, data, digital platforms, and property operations critical to our business. This position reports to the Chief Technology Officer, has direct access to the Audit Committee, and is based at our corporate headquarters in Indianapolis.
Principal Responsibilities
- Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board
- Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses
- Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people
- Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters
- Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance
- Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery
- Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business
- Build a high-performing team and a security culture that changes everyday behavior
Minimum Qualifications
- 15+ years in IT and security, including 7+ years in senior security leadership
- Experience building an enterprise security program in a large, multi-site organization
- Experience presenting cyber risk to a Board
- Hands-on leadership through significant security incidents
- Experience securing operational technology/IoT and cloud environments
- Knowledge of securing GenAI, NIST CSF, ISO 27001, and PCI DSS
- Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus
Executive presence, sound judgment under pressure, and a pragmatic, business-enabling approach matter as much as technical depth.
Similar roles
- SUtility Billing Specialist ISimon Property Group · Indianapolis, IN · Onsite
- SAssistant Director, Marketing & Business DevelopmentSimon Property Group · Lenox Square, GA · Onsite
Chief Information Security OfficerAlerus · Minnetonka, MN · Onsite
Chief Information Security OfficerVerily · Boston, MA · Hybrid
VP, Chief Information Security OfficerBeth Israel Lahey Health · Boston, MA · Onsite
Information Security Officer (Any city, CO, US, 99999)Gainwell Technologies · Remote · Remote
