Chief Information Security Officer

Donaldson•Bloomington, MN

2d•$340,000 - $390,000•Onsite

About The Position

The Chief Information Security Officer (CISO), based in Bloomington, Minnesota, is a highly visible enterprise leader responsible for shaping and advancing the cybersecurity strategy that protects Donaldson’s global operations, manufacturing environments, products, employees, customers, and intellectual property. The CISO partners across the executive team to strengthen resilience, enable responsible innovation, and prepare the company for an increasingly complex threat landscape. The role extends beyond traditional security operations to lead enterprise-wide transformation, advise executive leadership and the Board on cyber risk, and build a high-performing global organization. The organization supports digital modernization, operational technology, connected products, cloud platforms, and responsible AI adoption. Travel is up to 25%.

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or a related field, or an equivalent combination of education and relevant experience.
10+ years of progressive cybersecurity experience, including 7+ years leading enterprise teams across multiple security disciplines in a complex global environment.
Demonstrated experience developing and executing an enterprise cybersecurity strategy, transformation roadmap, and investment portfolio aligned with business objectives.
Experience leading response and recovery during major cybersecurity incidents or significant business disruptions.
Experience overseeing security for enterprise IT, cloud, applications, identity, and operational technology or manufacturing environments.

Nice To Haves

CISSP, CISM, GIAC, or comparable industry-recognized certification; a master’s degree in a relevant discipline is preferred.
Cybersecurity leadership experience within global manufacturing, industrial technology, critical infrastructure, defense, aerospace, or a Fortune 1000 enterprise.
Deep expertise in OT and industrial control system security, plant environments, connected products, and cyber-physical risk.
Proven success building intelligence-led defense through government, national security, information-sharing, or industry partnerships.
Working knowledge of NIST CSF, ISO 27001, CMMC, SOX, global privacy requirements, and other relevant regulatory frameworks.
Strong understanding of AI governance, securing AI solutions, AI-enabled cyber defense, emerging AI threats, and responsible AI practices.
Demonstrated ability to explain complex technology and risk topics, influence executive decisions, and engage effectively with a Board of Directors.
Track record of building exceptional teams, developing senior leaders, and improving organizational capability and succession depth.
Broad business and technology acumen across enterprise architecture, cloud, digital products, manufacturing operations, financial planning, and operating model design.
Known for setting a high bar, translating strategy into practical roadmaps, and delivering measurable outcomes with urgency and accountability.

Responsibilities

Develop and execute an enterprise cybersecurity strategy aligned with global business priorities, risk appetite, growth plans, and the technology roadmap.
Lead security operations, threat detection and hunting, incident response, cyber intelligence, security engineering and architecture, identity, application and product security, governance, risk, and compliance.
Establish and mature cybersecurity capabilities across corporate IT, cloud, manufacturing, operational technology, connected products, and third-party ecosystems.
Advise executive leadership and the Board on material cyber risk, enterprise resilience, emerging threats, regulatory obligations, and investment priorities using clear business language.
Direct preparedness, response, recovery, and executive communications for major cyber incidents and business disruptions; strengthen disaster recovery, business continuity, and crisis management.
Embed secure-by-design and shift-left practices into enterprise architecture, software delivery, product development, acquisitions, cloud modernization, and AI initiatives.
Build intelligence-led defense capabilities and trusted external relationships that convert threat insight into proactive protection of the enterprise.
Advance risk-based governance, policies, controls, compliance, metrics, and accountability across global operations, including SOX, CMMC, NIST, ISO 27001, and applicable privacy and regulatory obligations.
Own the cybersecurity operating model, investment portfolio, strategic partners, and measurable performance against approved risk-reduction and transformation outcomes.
Build, develop, and inspire a diverse, high-performing global cybersecurity team and a company-wide culture of security, accountability, and continuous improvement.