Among computer and information systems managers, AI is already used for some of the tasks. Measured exposure for computer and information systems managers: 16% (some).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Job Location: Corporate Indianapolis

Simon Property Group is seeking a strategic, business-focused CISO to lead the company’s enterprise cybersecurity, cyber-risk, and data privacy program, safeguarding the systems, data, digital platforms, and property operations critical to our business. This position reports to the Chief Technology Officer, has direct access to the Audit Committee, and is based at our corporate headquarters in Indianapolis.

Principal Responsibilities

Set and execute a multi-year, risk-based security strategy and report on cyber risk to the executive team, Audit Committee and Board

Lead secure AI and GenAI adoption, including AI governance, agentic AI and non-human identity controls, and using AI to strengthen our defenses

Protect corporate systems, property operational technology, and the shopper- and tenant-facing platforms that serve millions of people

Lead data privacy controls for Simon+ and other shopper platforms and partner with Legal on privacy matters

Direct 24x7 security operations and incident response, lead incident materiality assessment and support SEC cyber disclosure, and support PCI DSS and SOX compliance

Lead third-party and vendor risk management and resilience, including business continuity, disaster recovery, and ransomware recovery

Partner with Physical Security, Legal, Finance, Property Operations, Internal Audit, Enterprise Risk, and Digital to align security with the business

Build a high-performing team and a security culture that changes everyday behavior

Minimum Qualifications

15+ years in IT and security, including 7+ years in senior security leadership

Experience building an enterprise security program in a large, multi-site organization

Experience presenting cyber risk to a Board

Hands-on leadership through significant security incidents

Experience securing operational technology/IoT and cloud environments

Knowledge of securing GenAI, NIST CSF, ISO 27001, and PCI DSS

Public company, REIT, retail, or hospitality experience preferred; CISSP, CISM, CISA, or CRISC a plus

Executive presence, sound judgment under pressure, and a pragmatic, business-enabling approach matter as much as technical depth.