Chief Information Security Officer (CISO)

Google Chrome Microsoft Edge Apple Safari Mozilla Firefox Chief Information Security Officer (CISO)Full-timeDepartment: Information TechnologyJob Site: Any MCG LocationFLSA Status: ExemptCompany DescriptionMission Critical Group (MCG) is an end-to-end power solutions and services provider that accelerates time-to-power and delivers scalable, resilient infrastructure for mission critical environments. By integrating engineering, manufacturing, modular deployment, and lifecycle services under one platform, we streamline execution and bring complex projects online faster - without compromising performance. With more than 1.5 million square feet of U.S. manufacturing capacity, MCG supports data centers, power generation, healthcare, oil & gas, pharmaceuticals, semiconductors, and industrial facilities where uptime is non-negotiable.  Job DescriptionThe Chief Information Security Officer (CISO) is responsible for developing, implementing, and leading the enterprise cybersecurity, information risk management, and compliance strategy across a multi-site manufacturing organization.  CISO partners with business leaders, engineering, operations, legal, HR, and executive leadership to protect intellectual property, manufacturing systems, operational technology (OT), industrial control systems (ICS), cloud infrastructure, and enterprise applications while enabling business growth and digital transformation.CISO provides strategic leadership over cybersecurity governance, regulatory compliance, cyber risk, incident response, disaster recovery, identity management, and secure adoption of emerging technologies including AI and cloud platforms.The ideal candidate has extensive experience securing both Information Technology (IT) and Operational Technology (OT) environments within manufacturing.Key ResponsibilitiesExecutive LeadershipDevelop and execute the enterprise cybersecurity strategy aligned with business objectives.Present cybersecurity risks, metrics, investment strategies, and emerging threats to executive leadership.Build a security-first culture throughout the organization.Develop long-term cybersecurity roadmaps supporting mergers, acquisitions, and business growth.Cybersecurity GovernanceLead the enterprise security program including:Information Security GovernanceCyber Risk ManagementSecurity Policies and StandardsEnterprise Security ArchitectureThird-Party Risk ManagementData GovernanceAI GovernanceSecurity Awareness ProgramEnterprise Vulnerability ManagementDevelop security scorecards and executive dashboards to measure organizational risk.Manufacturing & Operational Technology (OT) SecurityLead security initiatives protecting:Industrial Control Systems (ICS)SCADA EnvironmentsPLC NetworksManufacturing Execution Systems (MES)RoboticsIoT DevicesPlant NetworksBuilding Automation SystemsResponsibilities include:Network segmentationZero Trust architectureSecure remote vendor accessAsset inventoryPatch managementOT vulnerability assessmentsICS incident responsePlant cyber resiliencyIT Infrastructure SecurityProvide oversight for:Microsoft 365AzureActive Directory / Entra IDIdentity GovernancePrivileged Access Management (PAM)Endpoint Detection & Response (EDR)SIEM / SOAREmail SecuritySecure Cloud ArchitectureData Loss Prevention (DLP)Network SecurityVPNFirewallsSecure Remote AccessCompliance & Regulatory LeadershipEnsure compliance with:NIST Cybersecurity Framework (CSF)NIST SP 800-53NIST SP 800-171CMMC Level 2 (if applicable)ISO 27001SOC 2 Type IICIS ControlsITARDFARSGDPRCCPAPCI-DSS (where applicable)HIPAA (where applicable)Lead internal and external security audits.Risk ManagementEstablish enterprise processes for:Cyber Risk AssessmentsBusiness Impact AnalysisRisk Register ManagementVendor Security ReviewsPenetration TestingSecurity Architecture ReviewsApplication SecuritySecure Software DevelopmentM&A Security Due DiligenceSecurity OperationsOversee:Security Operations Center (SOC)Incident ResponseThreat...