{"id":3304289,"url":"https://alion.io/job/generac-svpciso-cyber-and-product-security","title":"SVP/CISO Cyber and Product Security","company":{"id":58587,"name":"Generac","domain":"generac.com","url":"https://alion.io/company/generac","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":72,"ghost_share":0,"stale_share":0.972,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Waukesha, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":137000,"max_usd":258000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2716},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T20:59:08Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"We believe power is a promise - a shared commitment to be there for others when it matters most.\nFor more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.\nReady to Power a Smarter World with us?\nThe Senior Vice President Cybersecurity (Chief information Security Officer - CISO) leads Generac’s global Cybersecurity organization, partnering with the CIO, executive leadership, product engineering, manufacturing operations, business stakeholders, and external partners to protect the enterprise and its products.\nThis role is responsible for the strategy, leadership, and execution of Generac’s global cybersecurity and product security programs. Reporting to the Chief Information Officer, the CISO owns the enterprise security vision and multi-year roadmap, protecting Generac’s information assets, global manufacturing operations, connected products, and digital ecosystem against an evolving threat landscape. This leader brings a clear, experience-based view of what good looks like in a Fortune 500 industrial and manufacturing environment and is accountable for measurable reduction of cyber risk across IT, OT, and product domains.\nThe CISO leads a global organization spanning security operations, cybersecurity engineering, governance risk and compliance, product and IoT security, and OT/ICS security for manufacturing environments. The role requires an accomplished executive who has built and scaled high performing security teams, matured enterprise security programs in complex industrial settings, and can represent cybersecurity credibly to the executive leadership team, the Board of Directors, customers, and regulators.\nMajor Responsibilities\nDefines and executes a multi-year enterprise cybersecurity strategy and roadmap aligned to business objectives and benchmarked against Fortune 500 industrial and manufacturing peers, translating a clear view of what good looks like into prioritized, funded initiatives.\nServes as the senior-most cybersecurity executive, advising the CIO, executive leadership team, and Board of Directors on cyber risk posture, investment priorities, and emerging threats.\nModels enterprise-first leadership by partnering across business units, functions, and regions to balance risk, speed, operational continuity, and business growth.\nOwns the product security program for Generac’s connected products, energy technology platforms, and IoT ecosystems, embedding secure by design and secure development lifecycle practices across product engineering.\nEstablish and lead product security incident response (PSIRT), coordinated vulnerability disclosure, and compliance with emerging product security regulations and standards such as IEC 62443 and the EU Cyber Resilience Act.\nPartners cross-functionally with product engineering, manufacturing, operations, legal, compliance, and business leaders to embed security requirements into business processes, product development, and operational decision-making.\nLeads the security strategy for operational technology and industrial control systems across global manufacturing and distribution facilities, balancing risk reduction with production uptime and safety.\nEstablishes IT/OT convergence governance, segmentation and access standards, and incident response readiness tailored to plant floor environments.\nProvides executive oversight of the global security operations center, incident response, threat intelligence, and vulnerability management functions, ensuring around the clock detection and response across internal teams and managed service partners.\nServes as executive incident commander for material cyber events, directing enterprise response and leading communications with executive leadership, the Board, legal counsel, insurers, and regulators, including SEC materiality assessment and disclosure support.\nOwns the enterprise cyber risk management framework, security policy program, and control environment aligned to NIST CSF, ISO 27001, and applicable regulatory obligations including but not limited to driving certification/ recertification process for applicable products.\nDirects security compliance, audit readiness, SOX-related IT control partnership, and customer assurance activities across global operations.\nOwns the third-party cyber risk management program spanning suppliers, service providers, and technology partners across a global manufacturing supply chain.\nGoverns strategic security vendors and managed service providers through defined service levels, performance reviews, and rightsizing internal versus external capabilities.\nBuilds, leads, and develops a high performing global security organization, attracting top talent, developing future leaders, and establishing succession depth across security disciplines.\nDefines the security operating model, organizational design, and budget, managing multi-million-dollar program and technology investments for maximum risk reduction per dollar.\nDelivers clear, business-focused reporting on cyber risk, program maturity, and incident readiness to the executive leadership team and Board committees.\nChampions enterprise-wide security culture, awareness, and accountability, positioning cybersecurity as a business enabler for Generac’s energy technology strategy.\nMinimum Job Requirements\nEducation\nBachelor’s degree with focus in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field\nWork Experience\n15 years of progressive experience in cybersecurity, with at least 10 years in senior security leadership roles, including prior experience as a CISO, Deputy CISO, or equivalent head of security in a Fortune 500 or comparable global enterprise.\nKnowledge / Skills / Abilities\nDemonstrated experience leading cybersecurity in industrial, manufacturing, or similarly complex global environments, including OT/ICS security and product or IoT security for connected products.\nProven track record of building, scaling, and retaining high performing global security teams and maturing enterprise security programs against measurable outcomes.\nExperience presenting to Boards of Directors, audit committees, and executive leadership, including cyber risk reporting and material incident communications.\nExperience leading enterprise response to significant cyber incidents, including coordination with external counsel, forensic partners, insurers, law enforcement, and regulators.\nDeep working knowledge of industry frameworks and regulations, including NIST CSF, ISO 27001, IEC 62443, MITRE ATT&CK, and SEC cybersecurity disclosure requirements.\nExecutive presence and exceptional communication skills, with the ability to translate complex technical risk into business terms for Boards, customers, and non-technical leaders.\nStrategic vision balanced with operational depth across IT, OT, cloud, identity, application, and product security domains.\nStrong business acumen, including financial management of large security budgets, vendor negotiation, and cyber insurance strategy.\nSound judgment and decisiveness under pressure, with the ability to lead calmly and effectively during high severity incidents.\nProven ability to operate effectively influence without direct authority in a matrixed global environment, influencing without direct authority, collaborating across functions, and aligning cross-functional leaders and teams around enterprise priorities and shared cybersecurity outcomes/priorities.\nDemonstrated ability to lead through influence in a matrixed global organization, building trust, aligning cross-functional stakeholders, and driving accountability across teams that may not report directly to the role.\nPreferred Job Requirements\nEducation\nMaster’s degree in Cybersecurity, Computer Science, Engineering, or Business Administration (MBA)\nCertification / License\nCISSP, CISM, or equivalent executive-level security certifications\nWork Experience\nExperience in a publicly traded company subject to SEC cybersecurity disclosure rules; experience securing energy technology, power generation, or connected consumer/industrial products\nKnowledge / Skills / Abilities\nPhysical Requirements and Working Conditions\nPHYSICAL DEMANDS:\nOffice Environment (Includes field sales):\nWhile performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion, the incumbent may be required to stoop, bend, or reach above the shoulders. The employee must occasionally lift up to 25 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision, and the ability to adjust focus. Occasional travel.\nDISCLAIMER\nAll responsibilities and requirements are subject to possible modification to reasonably accommodate individuals with disabilities.\nThis job description in no way states or implies that these are the only responsibilities to be performed by an employee occupying this job or position. Employees must follow any other job-related instructions and perform any other job-related duties requested by their leaders.\n“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law.”","description_format":"text","description_chars":9560,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Storage","Information Security","Energy Management","Power Supplies & Power Electronics"],"lifecycle":[{"event":"open","at":"2026-10-27T00:43:25Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":32,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/generac-svpciso-cyber-and-product-security","json_url":"https://alion.io/job/generac-svpciso-cyber-and-product-security.json","meta":{"generated_at":"2026-10-30T00:35:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":685,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58587},"rest":"https://alion.io/mcp/rest/get_company?id=58587"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgenerac-svpciso-cyber-and-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgenerac-svpciso-cyber-and-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgenerac-svpciso-cyber-and-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/generac-svpciso-cyber-and-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgenerac-svpciso-cyber-and-product-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3304289}},{"tool":"search_jobs","arguments":{"company":"generac.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3304289},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}