Senior Vice President, Chief Information Security Officer (CISO)

Otis is the world’s leading elevator and escalator company, moving billions of people every day. As we continue to innovate and digitize our operations, cybersecurity is central to our absolutes of safety, ethics, and quality.

We are seeking a visionary results-driven Chief Information Security Officer to be accountable for protecting the confidentiality, integrity and availability of the company’s data, assets, products and technology worldwide — defining enterprise cyber risk and establishing the strategy, architecture, governance, tools and services required to mitigate it. Reporting directly to the EVP & Chief Digital Officer, this person will be based in the United States, ideally close to our Connecticut or Florida operations, and will bring deep expertise in information security operations, and executive-level leadership to protect Otis’s people, assets, and reputation.

Key Accountabilities:

• Serve as trusted advisor to the CEO and Executive Leadership Team on digital risk issues and recommend response strategies in support of overall cybersecurity and risk management for the organization.
• Provide leadership and oversight for 24x7, 365-day-per-year Global Security Operations Center that monitors all threats to the enterprise environment.
• Evolve and maintain a multi-year cyber strategy and executable implementation plan.
• Serve as the cybersecurity expert and leader for the global organization, ensuring cyber risks are aligned to the wants and needs of the business.
• Maintain a Cyber Governance Model that includes risk and compliance monthly meetings; Cyber Steering Committee quarterly meetings; regular engagement with Executive Leadership Team members; Cyber Council bi-yearly meetings; Audit Committee/ Board of Directors bi-yearly reviews; and a Cyber Maturity Model Assessment.
• Partner with business continuity and disaster recovery teams to ensure cyber resilience across critical operations.
• Serve as the key leader during major cyber incidents, coordinating response and recovery efforts.
• Oversea the security of Operational Technology/ IT/ AI environments.
• Drive continuous improvement with the use of playbooks and automation.
• Ensure ongoing alignment with regulatory requirements, industry standards, and internal governance.
• Review performance of vendor relationships, including MSP, and lead RFPs & analysis.
• Support litigation and investigations teams as and when required.
• Collaborate with global law enforcement, intelligence agencies, and industry peers to learn & share threat data and best practices.

Experience & Qualifications:

• Extensive and progressive leadership within information security risk management and compliance, in large, multi-national organisations.
• Excellent written and verbal communication, interpersonal and collaborative skills, with the ability to communicate digital and risk-related concepts to technical and non-technical audiences at all levels of the organization.
• Ability to lead complex projects in a highly matrixed organization, handling multiple priorities and to excel in a global, multicultural environment.
• Proven background thinking creatively and strategically to understand business issues and link results to organizational effectiveness.
• Aptitude to collaboratively develop a cybersecurity strategy with numerous, diverse stakeholders, influencing others and managing conflicting priorities to meet timelines and objectives.
• High level of personal integrity, with the capacity to handle highly sensitive or confidential information and demonstrate an appropriate level of judgment and maturity.
• Leadership presence and able to communicate sensitive strategic information to Executives and key stakeholders.
• Demonstrated success leading transformations, driving, and influencing change.
• Strategic mindset together with the willingness to be more tactical and operational; driving continuous improvement and providing hands-on expertise.
• Empathetic, inclusive leader with a desire to empower others and develop a high-performing team.
• Embody Otis’s Absolutes (Safety, Ethics, Quality) and leadership behaviors, serving as a role model for the organization.
• Professional risk certification such as CISSP or CISM.
• Practical knowledge and experience with cybersecurity best practices, standards and frameworks such as ISO/IEC 27001, NIST 800-53, SOX 404 and COBIT.