SVP/CISO Cyber and Product Security at Generac in Waukesha, WI

Job description

We believe power is a promise - a shared commitment to be there for others when it matters most. For more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future. Ready to Power a Smarter World with us? The Senior Vice President Cybersecurity (Chief information Security Officer – CISO) leads Generac’s global Cybersecurity organization, partnering with the CIO, executive leadership, product engineering, manufacturing operations, business stakeholders, and external partners to protect the enterprise and its products. This role is responsible for the strategy, leadership, and execution of Generac’s global cybersecurity and product security programs. Reporting to the Chief Information Officer, the CISO owns the enterprise security vision and multi-year roadmap, protecting Generac’s information assets, global manufacturing operations, connected products, and digital ecosystem against an evolving threat landscape. This leader brings a clear, experience-based view of what good looks like in a Fortune 500 industrial and manufacturing environment and is accountable for measurable reduction of cyber risk across IT, OT, and product domains. The CISO leads a global organization spanning security operations, cybersecurity engineering, governance risk and compliance, product and IoT security, and OT/ICS security for manufacturing environments. The role requires an accomplished executive who has built and scaled high performing security teams, matured enterprise security programs in complex industrial settings, and can represent cybersecurity credibly to the executive leadership team, the Board of Directors, customers, and regulators. Major Responsibilities Defines and executes a multi-year enterprise cybersecurity strategy and roadmap aligned to business objectives and benchmarked against Fortune 500 industrial and manufacturing peers, translating a clear view of what good looks like into prioritized, funded initiatives. Serves as the senior-most cybersecurity executive, advising the CIO, executive leadership team, and Board of Directors on cyber risk posture, investment priorities, and emerging threats. Models enterprise-first leadership by partnering across business units, functions, and regions to balance risk, speed, operational continuity, and business growth. Owns the product security program for Generac’s connected products, energy technology platforms, and IoT ecosystems, embedding secure by design and secure development lifecycle practices across product engineering. Establish and lead product security incident response (PSIRT), coordinated vulnerability disclosure, and compliance with emerging product security regulations and standards such as IEC 62443 and the EU Cyber Resilience Act. Partners cross-functionally with product engineering, manufacturing, operations, legal, compliance, and business leaders to embed security requirements into business processes, product development, and operational decision-making. Leads the security strategy for operational technology and industrial control systems across global manufacturing and distribution facilities, balancing risk reduction with production uptime and safety. Establishes IT/OT convergence governance, segmentation and access standards, and incident response readiness tailored to plant floor environments. Provides executive oversight of the global security operations center, incident response, threat intelligence, and vulnerability management functions, ensuring around the clock detection and response across internal teams and managed service partners. Serves as executive incident commander for material cyber events, directing enterprise response and leading communications with executive leadership, the Board, legal counsel, insurers, and regulators, including SEC materiality assessment and disclosure support. Owns the enterprise cyber risk management framework, security po