Chief Information Security Officer

The Chief Information Security Officer (CISO) leads enterprise security strategy, risk management, and compliance for the FAL Group of companies under Fortive, which are SaaS/data platform companies in the Facilities and Asset Lifecycle space. This senior management role involves technical security leadership and business strategy, reporting to the Chief Digital and Services Officer at Accruent and collaborating with executive teams across multiple companies.

Location: United States

Responsibilities

• Own and evolve the company’s information security strategy aligned to business objectives.
• Lead and develop a high-performing security organization across various security domains.
• Manage security budget and establish security architecture standards.
• Act as the security voice across three businesses, translating and calibrating messaging.
• Maintain visibility of security posture and strategic programs to executive teams.
• Chair and lead the Information Security Council at each operating company.
• Own the company’s compliance posture across multiple frameworks including SOC 2, ISO 27001, CMMC, HIPAA, GDPR, etc.
• Lead audit cycles, evidence collection, and remediation tracking.
• Maintain a current risk register and lead risk management escalations.
• Serve as the executive owner of the security review process for enterprise sales.
• Partner with Sales and Legal to reduce sales cycle friction related to security.
• Represent the company in customer-facing security discussions.
• Own the enterprise risk management program, including third-party/vendor risk assessment.
• Build and maintain incident response plan, lead security incident responses.
• Conduct tabletop exercises and response tests.
• Present security posture, risk trends, and program maturity to Fortive.
• Serve as a stakeholder in technical and security diligence processes.
• Advise the executive team on emerging threats and regulatory changes.

Requirements

• 10+ years in information security, with 5+ years in a senior leadership role (CISO, VP Security, Director of Security or equivalent).
• Experience managing SOC 2 and/or ISO 27001 programs, including audit cycles.
• Experience managing executive stakeholders across multiple lines of business.
• Experience presenting to boards and translating technical risk into business terms.
• Strong knowledge of cloud security (AWS, GCP, Azure), application security, and data protection regulations.
• Experience building or scaling a security function, including hiring and development.
• Supporting enterprise sales through customer security reviews and questionnaires.
• Proven ability to drive security culture and trust.