About this role
<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>About our group:</b></H2> </div><div><p><span style="font-size:11.0pt"><span><span style="font-family:'Calibri', sans-serif"><p> </p> <p>Seagate Technology is a global leader in data storage solutions, operating at the intersection of cutting-edge innovation and legacy infrastructure. Our Information Technology organization is responsible for enabling secure, scalable, and resilient systems across our global enterprise. </p> <p> </p> <p>We are seeking a strategic, execution-oriented CISO to lead cybersecurity across a complex global environment spanning cloud, enterprise IT, and operational technology (OT). </p> <p> </p> <p>Reporting to the SVP, Chief Information Officer, the CISO will be accountable for defining security strategy and ensuring execution of core security capabilities, with a strong focus on risk-based prioritization, operational effectiveness, and measurable outcomes. </p></span></span></span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>About the role - you will:</b></H2> </div><div><p><span style="font-size:11.0pt"><span><span style="font-family:'Calibri', sans-serif"><p> </p> <p>1. Own Security Risk Posture and Outcomes</p> <p> </p> <p>Establish and maintain an integrated, fact-based view of the organization's security risk posture that spans enterprise IT, cloud, and operational technology environments. Synthesize technical risk signals into a coherent view of business and operational impact. </p> <p> </p> <p>Ensure risk posture is translated into prioritized action aligned to actual business and operational risk </p> <p> </p> <p>2. Drive execution across cloud, IT, and OT environments </p> <p> </p> <p>Define security and control models appropriate to each environment, recognizing the distinct constraints and risk profiles of cloud, enterprise IT, and operational technology </p> <p> </p> <p>Establish clear ownership, accountability, and decision rights across the distributed execution model, ensuring security outcomes are owned beyond the InfoSec organization across InfoSec, IT, and Business functions </p> <p> </p> <p>Influence resource and investment prioritization across IT and business to ensure security requirements are addressed at the right level </p> <p> </p> <p>Measure and report on execution effectiveness — tracking control implementation, remediation velocity, and residual risk reduction over time </p> <p> </p> <p>3. Establish and operate a risk-based security operating model that drives consistent, prioritized, and measurable security outcomes across the enterprise </p> <p> </p> <p>Define and socialize a risk appetite and tolerance framework in partnership with executive leadership — establishing the calibration point for all security prioritization decisions </p> <p> </p> <p>Build a risk-based investment and prioritization framework that allocates security resources based on risk reduction outcomes, not tool deployment or compliance checkbox completion </p> <p> </p> <p>4. Mature the security program from reactive to proactive across protection, detection, response, and recovery capabilities </p> <p> </p> <p>5. Build and Lead a High-Accountability Security Organization </p> <p> </p> <p>Establish a clear expectation for ownership, delivery, and measurable outcomes </p> <p> </p> <p>Drive a culture of accountability, prioritization and execution discipline across the security function </p> <p> </p> <p>6. Communicate clearly with Executive Leadership and Board </p> <p> </p> <p>Present clear, fact-based views of risk posture </p> <p> </p> <p>Articulate technical issues into business impact, prioritization decisions </p> <p> </p> <p>Provide transparency on progress, trade-offs and limitations </p> <p> </p> <p>Success in this role will be measured by clear, fact-based visibility into risk posture, effective prioritization of security efforts, and demonstrable improvements in control effectiveness across environments across environments. </p></span></span></span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>About you:</b></H2> </div><div><p><span style="font-size:11.0pt"><span><span style="font-family:'Calibri', sans-serif"><p> </p> <ul> <li>You are a strategic and pragmatic security leader who balances strategy with execution </li> <li>You are comfortable operating in complex, heterogeneous environments with competing priorities and constraints </li> <li>You challenge assumptions and drive clarity and prioritization </li> <li>You focus on outcomes over activity </li> <li>You can operate effectively in ambiguous environments </li> </ul></span></span></span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Your experience includes:</b></H2> </div><div><p><span style="font-size:11.0pt"><span><span style="font-family:'Calibri', sans-serif"><p> </p> <p> </p> <ul> <li>Executive-level global leadership role in cybersecurity within large, global enterprises </li> </ul> <p> </p> <ul> <li>Strong experience in: </li> </ul> <p> </p> <ul> <li>OT / Manufacturing / Industrial environments </li> <li>Cybersecurity architecture, risk management and regulatory compliance </li> <li>Demonstrated ability to building, developing, and retaining high-performing global security teams, recruiting strong talent, structuring organizations to match operating models, and developing security leaders capable of owning outcomes independently </li> <li>Demonstrated ability to drive execution and establish risk-based prioritization frameworks </li> <li>Experience building and adapting zero-trust principles in complex hybrid environments including OT </li> <li>Proven track record of improving control effectiveness, not just deploying tools. </li> <li>Strong communication and stakeholder engagement skills, including Board-level reporting </li> </ul> <p> </p> <p>You might also have</p> <p> </p> <ul> <li>Certifications such as CISSP, CISM, or CISA </li> <li>Experience working with international regulatory bodies and cross-border data protection laws </li> <li>M&A security experience </li> </ul></span></span></span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Location:</b></H2> </div><div><p><p> </p> <p>Singapore (office based role)</p></p> <p> </p> <p><b>Location</b>: Shugart, Singapore<br> <b>Travel</b>: None</p></div></div></div>