Vice President, CISO

The Vice President, Chief Information Security Officer (CISO) reports directly to the Senior Vice President, Chief Information Officer (CIO) and leads enterprise vision, strategy, and programs to protect information assets and technologies across global operations.Core Responsibilities:Oversees cybersecurity governance, risk management, compliance, and incident response aligned with business objectives and regulatory requirements worldwide.Develops Enterprise IT Security and Risk Policies. Manages Vendor IT Risks, Global IT Risk/Security Services, and influences organizational security behavior.This role is responsible for managing IT risks relating to Information Security, Business Continuity Planning, Crisis Management and Privacy/Compliance (globally). The role also directs the adoption and implementation of IT Policies and Procedures across the enterprise.Critical Focus Areas:SAP S/4 Hana Security; Secures Enterprise S/4 Hana implementation across finance, manufacturing, and supply chain. Implements authorization frameworks, segregation of duties controls, and data protection strategies. Manages security architecture for cloud and hybrid SAP deployments. Ensures compliance with financial controls during ERP transformation.Agentic AI Security; Establishes security frameworks for autonomous AI agents across manufacturing, supply chain, and customer engagement. Manages risks related to AI autonomy, data access, and model integrity. Implements authentication, authorization, and activity monitoring controls. Addresses prompt injection, model poisoning, and adversarial attacks.IT/OT Convergence and Manufacturing Security; Secures operational technology environments across global plants. Protects industrial control systems, SCADA networks, and production technologies. Implements network segmentation between IT and OT. Manages cyber-physical security risks in manufacturing operations. Coordinates with plant operations and supply chain leadership.Salesforce Platform Security; Protects customer data and engagement platforms across B2B and B2C channels. Ensures compliance with global data privacy regulations.Consumer Security and Brand Protection; Partners with business functions on consumer data protection and privacy, digital commerce and payment security, brand protection and digital trust, connected product and IoT security.Job Duties / Responsibilities may include, but are not limited to:Cybersecurity Strategy and Governance:Develop and execute a global information security strategy aligned with corporate goals and industry best practicesProvide strategic oversight for risk and strategies - dealing with potential risk through contingency planning and risk mitigationDevelop/Align the IT risk and security strategy/roadmap to progress our security and risk processes/tools to improve critical business capabilitiesOversee business continuity, mitigate risk and ensure compliancy through the existence of secure/sustainable IT security policiesSet usage and security policies for information sharing on internal/external platformsLeadership to Global IT Risk and Security Team:Responsible for the organizational development of direct/indirect reports and providing feedbackAssure needed capabilities/skills are available to achieve planned results in collaboration with global Technology leadersCoach, mentor and empower team members to deliver results and become future leadersPerform managerial activities (i.e., performance management, associate development, team staffing, recognition plans, performance improvement plans, disciplinary actions and communication/enforcement of policies and procedures)Educate the Global Organization:Educate global Business Unit Leaders and Service Managers on IT security policiesUnderstand the trade-offs required to manage the different levels of IT risk tolerance/risk exposure across the organization and balance this with risk investmentsEducate Executive Leadership on cyber risks and create an information security awareness program with custom communication tools and campaigns for each business unit and integrated services groupServe as a strategic business partner for the global business continuity planning process across business units and the Integrated Services group.Provide IT security services (globally) that protect the company (at an acceptable level of risk) and promotes business growth.Advise executive leadership and the Board of Directors regarding emerging threats, risk posture.Key Experience14 or more years of experience in running the Information Security Office -Analyzing/Applying information security risk, risk management and privacy practicesSenior security leadership experience in a global manufacturing or industrial operations with direct/indirect reportsRelevant work experience (including consulting and general industry experience)Expert knowledge of national and interpersonal regulatory compliances and frameworks (e.g., ISO, COBIT, DPD, HIPPA and PCI DSS)Proven track record securing large-scale ERP implementations, preferably SAP S/4HANADeep OT security and IT/OT convergence experience in manufacturingDemonstrated AI security frameworks and governance expertise for autonomous systemsExperience securing complex, multi-channel customer platformsExtensive experience in strategic planning, budgeting and allocationExperience in law enforcement and/or national security is desiredRequired: Bachelor's degree in Computer Science, Engineering, ManagementInformation Systems or a related disciplineDesired: Master's degree in Computer Science, Engineering, ManagementInformation Systems or a related disciplineKey SkillsExcellent leadership, presentation, interpersonal and communication (verbal/written) skillsAble to analyze/grasp a situation quickly from different perspectives and create well-reasoned solutionsWorking knowledge of IT financial management and IT auditCompetent in IT risk assessment/management, IT continuity management, IT governance formulation and organizational changeExpert in information policy formulation, information security management and business risk management#LI-FA1Goodyear is one of the world's largest tire companies. It employs about 68,000 people and manufactures its products in 51 facilities in 19 countries around the world. Its two Innovation Centers in Akron, Ohio, and Colmar-Berg, Luxembourg, strive to develop state-of-the-art products and services that set the technology and performance standard for the industry. For more information about Goodyear and its products, go to .If you need reasonable accommodation to complete the online application, or any other part of the employment process, please contact the Goodyear Candidate Care Line at 330.796.4500.Goodyear is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

Created: 2026-04-02