> Markdown version of [/jobs/ext/3761999-chief-information-security-officer](https://www.wearedevelopers.com/jobs/ext/3761999-chief-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Officer

- **Company:** Simon Property
- **Location:** Indianapolis, IN, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Disaster Recovery, PCI Data Security Standards, Cloud Platform System, Malware, National Institute of Standards and Technology Cybersecurity Framework
- **Published:** October 15, 2026
- **Apply:** https://simon.wd1.myworkdayjobs.com/Simon/job/Indianapolis-IN/Chief-Information-Security-Officer_R14113

## About the Role

* 15+ years in IT and security, including 7+ years in senior security leadership
 * Experience building an enterprise security program in a large, multi-site organization
 * Experience presenting cyber risk to a Board
 * Hands-on leadership through significant security incidents
 * Experience securing operational technology/IoT and cloud environments
 * Knowledge of securing GenAI, NIST CSF, ISO 27001, and PCI DSS
 * Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus

Executive presence, sound judgment under pressure, and a pragmatic, business-enabling approach matter as much as technical depth.

## Description

* Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board
 * Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses
 * Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people
 * Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters
 * Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance
 * Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery
 * Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business
 * Build a high-performing team and a security culture that changes everyday behavior