Chief Information Security Officer - CISO

The Chief Information Security Officer (CISO) leads a global cybersecurity program that protects the organization’s enterprise information assets, transportation systems, warehouse technologies, and supply chain data. They oversee cyber risk management, ensure regulatory and SOX compliance, provide executive‑level guidance on evolving threats and regulatory requirements, and strengthen resilience across a fast‑moving, operationally critical environment. They directly shape security architecture and ensure effective global governance, operational resilience, and a strong security culture across the enterprise.

Responsibilities

• Develop and execute a security strategy and roadmap aligned with logistics operations, supply chain systems, and customer commitments
• Lead security governance, enterprise risk management, SOX ITGC compliance, and policy frameworks.
• Guide secure architecture and technology decisions across cloud, network, and applications.
• Oversee vulnerability management and continuous security monitoring across enterprise and operational systems to reduce exposure and strengthen posture.
• Lead incident response efforts to drive rapid detection, coordinated remediation, effective communication, with minimized business disruption.
• Strengthen resilience against cyber threats targeting supply‑chain continuity and protect operational technologies (OT), IoT devices, telematics, and fleet systems.
• Build and lead a high‑performing global team covering enterprise and operational domains.
• Represent Information Security in strategic technology efforts including M&A, transformation, and modernization initiatives.
• Manage third‑party security risk for carriers, transportation partners, 3PL providers, and technology vendors.
• Present security posture, operational risk, and compliance updates to executive leadership and the Board.
• All other duties as assigned to meet evolving business needs.

Qualifications

• Education: Undergraduate degree in Information Security, Computer Science, Engineering, or a related field from an accredited college or university.
• Certification/Licensure: CISSP, CISM, CISA, CRISC, CCSP, CCISO, GIAC, or comparable executive‑level security certifications preferred.
• Experience: 10+ years of progressive cybersecurity experience, including 5+ years leading global security organizations in public and private companies.
• Proven experience advising executive leadership and Boards on cyber risk, security governance, and public‑company/IPO readiness.
• Strong background in SOX, ITGC control design, audit readiness, and global regulatory requirements (GDPR and similar).
• Operational & industrial security experience including logistics, transportation, supply‑chain, distribution, or manufacturing environments; familiarity with OT, IoT, SCADA/PLC, telematics, and high‑availability operational systems.
• Demonstrated ability to minimize operational disruption during incidents in logistics or industrial environments.
• Demonstrated discretion and confidentiality in handling and protecting sensitive information.
• Technical: Proficient with common office technologies, including Windows PCs, Microsoft O365 (Outlook, Word, Excel, PowerPoint, etc.) and web conferencing (Teams, Zoom, Webex, etc.).
• Environment: Comfort commuting to/from and working in a 100% on‑site setting (listed in this posting), with travel for related meetings/events.

Forward Air is an Equal Opportunity employer. 

--

#LI-Onsite