Chief Information Security Officer

Simon Property Group • Indianapolis, IN

1d • Onsite

About The Position

Simon Property Group is seeking a strategic, business-focused Chief Information Security Officer to lead the company’s enterprise cybersecurity, cyber-risk, and data privacy program. The CISO will safeguard systems, data, digital platforms, and property operations critical to the business. The position is based at the company’s corporate headquarters in Indianapolis, reports to the Chief Technology Officer, and has direct access to the Audit Committee.

Requirements

• 15+ years in IT and security, including 7+ years in senior security leadership.
• Experience building an enterprise security program in a large, multi-site organization.
• Experience presenting cyber risk to a Board.
• Hands-on leadership through significant security incidents.
• Experience securing operational technology/IoT and cloud environments.
• Knowledge of securing GenAI, NIST CSF, ISO 27001, and PCI DSS.
• Executive presence, sound judgment under pressure, and a pragmatic, business-enabling approach, alongside technical depth.

Nice To Haves

• Public company, REIT, retail, or hospitality experience preferred.
• CISSP, CISM, CISA, or CRISC certification is a plus.

Responsibilities

• Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee, and Board.
• Lead secure AI and GenAI adoption, including AI governance, agentic AI, and non-human identity controls, and use AI to strengthen defenses.
• Protect corporate systems, property operational technology, and shopper- and tenant-facing platforms.
• Lead data privacy controls for Simon+ and other shopper platforms, partnering with Legal on privacy matters.
• Direct 24x7 security operations and incident response; lead incident materiality assessment; support SEC cyber disclosure, PCI DSS, and SOX compliance.
• Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery.
• Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business.
• Build a high-performing team and a security culture that changes everyday behavior.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed