Segment CISO

Caterpillar Inc.•Nashville, TN

4d•$172,630 - $258,950•Onsite

About The Position

The Segment CISO is the senior cybersecurity leader for the Power and Energy segment, accountable for protecting enterprise value across its operations, customers, and supply chain. The role leads business partners, IT professionals, cybersecurity contributors, and suppliers to deliver security solutions aligned with the business strategy, with direct accountability for segment-specific cybersecurity functions and technology supporting areas such as customer relationship management, manufacturing, and supply chain. The leader identifies cybersecurity risks and opportunities in the business, develops business-aligned solutions, prioritizes resources, negotiates contracts, guides team members, and consults with segment executives so that security enables growth rather than constraining it. The role owns the segment's cyber risk posture, incident readiness, and compliance, and represents the segment in enterprise security governance.

Requirements

Strategic Leadership: Experience developing, communicating, and executing enterprise cybersecurity strategies and roadmaps aligned with business priorities.
Demonstrated success leading large-scale security and risk programs through transformation.
Cybersecurity & Manufacturing Expertise: Deep understanding of cyber risk management, incident response, and compliance in a global manufacturing environment.
Experience securing operational technology and plant environments alongside enterprise platforms such as ERP, CRM, and supply chain systems.
Working knowledge of relevant frameworks and regulations (NIST CSF, ISO 27001, IEC 62443, data protection, export controls); CISSP, CISM, or equivalent preferred.
Relationship Management & Influence: Proven ability to build trusted partnerships and influence stakeholders from plant floor to executive leadership.
Skilled at leading in matrixed environments through influence and accountability, and at conveying complex technical risk in business terms.
Operational Excellence: Experience protecting mission-critical applications and global manufacturing operations.
Ability to balance innovation and speed with reliability, stability, and security.
People Leadership: Demonstrated success leading, developing, and inspiring high-performing global teams of employees and suppliers.
Ability to attract, develop, and retain diverse talent while fostering a culture of accountability and continuous learning.

Nice To Haves

CISSP, CISM, or equivalent preferred.

Responsibilities

Own the segment cybersecurity strategy and multi-year roadmap, aligned to the segment business strategy and the enterprise cybersecurity program, and report progress and risk to the Group CIO and segment leadership.
Serve as the segment's senior cyber risk advisor: identify, quantify, and prioritize cyber risk across CRM, manufacturing and operational technology, supply chain, and product-connected systems, and drive risk decisions with business owners.
Translate enterprise security policies, standards, and architectures into segment-specific controls, and hold application, infrastructure, and plant teams accountable for adoption.
Lead segment incident readiness and response in partnership with the enterprise Security Operations Center, including plant and OT incident playbooks, tabletop exercises, and business continuity coordination.
Embed security into the segment's delivery lifecycle: secure-by-design reviews, third-party and supplier risk assessments, cloud and AI adoption guardrails, and remediation of audit and assessment findings.
Ensure compliance with applicable regulatory, contractual, and customer security requirements across the segment's global footprint, and represent the segment in internal and external audits.
Prioritize and manage the segment cybersecurity budget and resources, negotiate supplier and managed-service contracts, and demonstrate measurable return on security investment.
Build and develop a high-performing team of security professionals and business partners; set clear expectations, coach for growth, and cultivate a pipeline of cyber talent within the segment.
Drive a security-aware culture across segment IT and the business through executive engagement, leader education, and clear metrics that make cyber risk visible and actionable.
Represent the segment in enterprise cybersecurity governance, contribute to enterprise standards, and share threat intelligence and lessons learned across segments.