Date Posted:2026-09-01
Country: United States of America
Location: OT492: 1FS - Farmington, CT 1 Farm Springs, Farmington, CT, 06032 USA
We are seeking a visionary results-driven
Chief Information Security Officer (CISO) to be accountable for protecting the confidentiality, integrity and availability of the company's data, assets, products and technology worldwide - defining enterprise cyber risk and establishing the strategy, architecture, governance, tools and services required to mitigate it.
Reporting directly to the EVP & Chief Digital Officer, this person will be based in the United States, ideally close to our Connecticut or Florida operations, and will bring deep expertise in information security operations, and executive-level leadership to protect Otis's people, assets, and reputation.
Key Accountabilities: - Serve as trusted advisor to the CEO and Executive Leadership Team on digital risk issues and recommend response strategies in support of overall cybersecurity and risk management for the organization.
- Provide leadership and oversight for 24x7, 365-day-per-year Global Security Operations Center that monitors all threats to the enterprise environment.
- Evolve and maintain a multi-year cyber strategy and executable implementation plan.
- Serve as the cybersecurity expert and leader for the global organization, ensuring cyber risks are aligned to the wants and needs of the business.
- Maintain a Cyber Governance Model that includes risk and compliance monthly meetings; Cyber Steering Committee quarterly meetings; regular engagement with Executive Leadership Team members; Cyber Council bi-yearly meetings; Audit Committee/ Board of Directors bi-yearly reviews; and a Cyber Maturity Model Assessment.
- Partner with business continuity and disaster recovery teams to ensure cyber resilience across critical operations.
- Serve as the key leader during major cyber incidents, coordinating response and recovery efforts.
- Oversea the security of Operational Technology/ IT/ AI environments.
- Drive continuous improvement with the use of playbooks and automation.
- Ensure ongoing alignment with regulatory requirements, industry standards, and internal governance.
- Review performance of vendor relationships, including MSP, and lead RFPs & analysis.
- Support litigation and investigations teams as and when required.
- Collaborate with global law enforcement, intelligence agencies, and industry peers to learn & share threat data and best practices.
Experience & Qualifications: - Extensive and progressive leadership within information security risk management and compliance, in large, multi-national organisations.
- Excellent written and verbal communication, interpersonal and collaborative skills, with the ability to communicate digital and risk-related concepts to technical and non-technical audiences at all levels of the organization.
- Ability to lead complex projects in a highly matrixed organization, handling multiple priorities and to excel in a global, multicultural environment.
- Proven background thinking creatively and strategically to understand business issues and link results to organizational effectiveness.
- Aptitude to collaboratively develop a cybersecurity strategy with numerous, diverse stakeholders, influencing others and managing conflicting priorities to meet timelines and objectives.
- High level of personal integrity, with the capacity to handle highly sensitive or confidential information and demonstrate an appropriate level of judgment and maturity.
- Leadership presence and able to communicate sensitive strategic information to Executives and key stakeholders.
- Demonstrated success leading transformations, driving, and influencing change.
- Strategic mindset together with the willingness to be more tactical and operational; driving continuous improvement and providing hands-on expertise.
- Empathetic, inclusive leader with a desire to empower others and develop a high-performing team.
- Embody Otis's Absolutes (Safety, Ethics, Quality) and leadership behaviors, serving as a role model for the organization.
- Professional risk certification such as CISSP or CISM.
- Practical knowledge and experience with cybersecurity best practices, standards and frameworks such as ISO/IEC 27001, NIST 800-53, SOX 404 and COBIT.
Salary & Benefits
The salary range for this role is USD $360k - $400k. We may ultimately pay more or less than the posted range, and the range may change in the future. Pay within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, and business or organizational needs.
This position is eligible to participate in our annual executive short-term Incentive plan and is eligible to receive equity awards under the Otis executive long-term incentive plan.
Otis currently provides our colleagues with the following benefits:
- 401(k) plan that includes generous company match and a separate automatic retirement contribution
- Comprehensive medical, prescription drug, dental and vision coverage for colleagues and their eligible dependents, beginning on their first day of employment
- Three weeks paid vacation and paid company holidays
- Paid sick leave - Employee assistance and wellness incentive programs
- Life insurance and disability coverage
- Voluntary benefits, such as legal, pet, home, and auto insurance
- Birth/adoption and parental leave benefits
- Adoption assistance
- Tuition reimbursement program
- Peer recognition and service anniversary awards, as well as spot performance bonus opportunities
If you live in a city, chances are we will give you a lift or play a role in keeping you moving every day.
