Deputy Chief Information Security Officer (Deputy CISO)

Responsibilities

The Deputy Chief Information Security Officer serves as a senior leader within the Global Cybersecurity Organization, responsible for driving enterprise‑wide security strategy, governance, and operational resilience across a complex, highly regulated aerospace manufacturing environment. This role reports directly to the CISO and partners to safeguard intellectual property, protect critical manufacturing systems, ensure compliance with international defense and export regulations, and strengthen the company’s global cyber defense posture.

The Deputy CISO acts as the CISO’s primary delegate, overseeing day‑to‑day security operations, leading cross‑functional security initiatives, and assists with representing the cybersecurity function with internal and external stakeholders.

Key Responsibilities

Strategic Leadership & Governance

• Support the CISO in developing and executing the global cybersecurity strategy aligned to business, engineering, and manufacturing priorities.
  • Lead enterprise security governance, risk management, and compliance programs across multiple regions and regulatory environments.
  • Drive adoption of security frameworks such as NIST 800‑171, NIST CSF, ISO 27001, CMMC, NIS2 and aerospace/defense‑specific requirements (e.g., ITAR, DFARS, EAR).
  • Serve as acting CISO when required, including executive briefings, board presentations, and crisis leadership.

Cyber Defense & Operations

• Partner with CISO to oversee global Security Operations Center (SOC), threat intelligence, incident response, and digital forensics capabilities, cyber investigations, Data Loss Preventions and cyber architecture and maintain cybersecurity regulatory/legal requirements.
  • Ensure rapid detection, containment, and remediation of cyber threats targeting manufacturing systems, OT/ICS environments, R&D networks, and supply chain partners.
  • Lead development of advanced defense capabilities including zero trust architecture, identity security, and endpoint/OT protection.

Risk Management & Compliance

• Direct enterprise cyber risk assessments, supplier security evaluations, tabletop and penetration testingand compliance audits across global operations.
  • Partner with Legal, Compliance, Information Technology, and Export Control teams to ensure adherence to aerospace and defense regulatory requirements.
  • Oversee third‑party risk management, ensuring secure collaboration with suppliers, contractors, and joint‑venture partners.

Product, Engineering & OT Security

• Collaborate with engineering and manufacturing leaders to embed security into product design, avionics systems, and industrial control systems.
  • Lead security programs for factory automation, robotics, additive manufacturing, and other advanced aerospace production technologies.
  • Ensure secure integration of IT/OT systems and protection of proprietary aerospace designs and intellectual property.

Leadership & Stakeholder Engagement

• Mentor and develop global cybersecurity leaders and technical teams.
• Build strong partnerships with business units, engineering, operations, and executive leadership.
• Represent the cybersecurity function with regulators, government agencies, defense customers, and industry partners.

Key Competencies

• Experience reporting to the Board of Directors
• Strategic thinking and enterprise‑level decision‑making
• Strong communication and executive presence
• Crisis leadership and resilience
• Technical depth across IT, OT, cloud, and product security
• Ability to balance security, innovation, and operational continuity
• High integrity and commitment to protecting sensitive aerospace data

Qualifications

Basic Qualifications

• Bachelors in cybersecurity, engineering, computer science, or related field
• 10+ years of progressive experience in cybersecurity, including leadership roles in large, complex, global organizations.
• Deep expertise in security governance, risk management, incident response, and regulatory compliance.
• Experience securing OT/ICS environments, manufacturing systems, or aerospace/defense technologies.
• Strong knowledge of NIST, ISO, CMMC, DFARS, ITAR, and other relevant frameworks.
• Proven ability to lead large teams, manage crises, and influence senior executives.
• Ability to operate effectively in a high‑security, export‑controlled environment.
• Employees must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Visa sponsorship is not available for this position.

Preferred Qualifications

• Experience in aerospace, defense, or other high‑assurance industries (e.g., automotive, energy, semiconductor).
• Advanced degree in cybersecurity, engineering, computer science, or related field.
• Relevant certifications: CISSP, CISM, CISA, GIAC, CCSP, or equivalent.
• Experience with secure product development, supply chain security, and zero trust transformation.
• Familiarity with global regulatory environments and multinational operations.

Location

This will be hybrid role with a 3 day in office expectation here at our Corporate Center in Pittsburgh, PA. There is a potential for up to 25% travel.

Salary range: $175 – 210k/year approximation (Actual compensation is subject to variation due to factors such as education, experience, skillset, and/or location).

About us

Howmet Aerospace Inc. (NYSE: HWM), headquartered in Pittsburgh, Pennsylvania, is a leading global provider of advanced engineered solutions for the aerospace and transportation industries. Our primary businesses focus on jet engine components, aerospace fastening systems, titanium structural parts and forged wheels. With $7.4 Billion in revenue in 2024, our products play a crucial role in enabling fuel efficiency and lightweighting, contributing to our customers’ success and making a positive impact on the world. To learn more about the way Howmet Aerospace Inc. is advancing the sustainability of our customers, markets, and communities where we operate, review the 2024 Environmental Social and Governance report at www.howmet.com/esg-report. Follow: LinkedIn, Twitter, Instagram, Facebook, and YouTube. Equal Opportunity Employer: Howmet is proud to be an Equal Employment Opportunity employer. We are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or other applicable legally protected characteristics. If you need assistance to complete your application due to a disability, please email TalentAcquisitionCoE_Howmet@howmet.com