Chief Information Security Officer

Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities. ​

Position Summary

The Chief Information Security Officer (CISO), based in Bloomington, MN, is a highly visible enterprise leader responsible for shaping and advancing the cybersecurity strategy that protects Donaldson’s global operations, manufacturing environments, products, employees, customers, and intellectual property. This leader will partner across the executive team to strengthen resilience, enable responsible innovation, and prepare the company for an increasingly complex threat landscape.

Extending beyond traditional security operations, the CISO will lead enterprise-wide transformation, advise executive leadership and the Board on cyber risk, and build a high-performing global organization that supports digital modernization, operational technology, connected products, cloud platforms, and responsible AI adoption.

Role Responsibilities

• Develop and execute an enterprise cybersecurity strategy aligned with global business priorities, risk appetite, growth plans, and the technology roadmap.

• Lead security operations, threat detection and hunting, incident response, cyber intelligence, security engineering and architecture, identity, application and product security, governance, risk, and compliance.

• Establish and mature cybersecurity capabilities across corporate IT, cloud, manufacturing, operational technology, connected products, and third-party ecosystems.

• Advise executive leadership and the Board on material cyber risk, enterprise resilience, emerging threats, regulatory obligations, and investment priorities using clear business language.

• Direct preparedness, response, recovery, and executive communications for major cyber incidents and business disruptions; strengthen disaster recovery, business continuity, and crisis management.

• Embed secure-by-design and shift-left practices into enterprise architecture, software delivery, product development, acquisitions, cloud modernization, and AI initiatives.

• Build intelligence-led defense capabilities and trusted external relationships that convert threat insight into proactive protection of the enterprise.

• Advance risk-based governance, policies, controls, compliance, metrics, and accountability across global operations, including SOX, CMMC, NIST, ISO 27001, and applicable privacy and regulatory obligations.

• Own the cybersecurity operating model, investment portfolio, strategic partners, and measurable performance against approved risk-reduction and transformation outcomes.

• Build, develop, and inspire a diverse, high-performing global cybersecurity team and a company-wide culture of security, accountability, and continuous improvement.

Travel

Up to 25%

Minimum Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or a related field, or an equivalent combination of education and relevant experience.
• 10+ years of progressive cybersecurity experience, including 7+ years leading enterprise teams across multiple security disciplines in a complex global environment.
• Demonstrated experience developing and executing an enterprise cybersecurity strategy, transformation roadmap, and investment portfolio aligned with business objectives.
• Experience leading response and recovery during major cybersecurity incidents or significant business disruptions.
• Experience overseeing security for enterprise IT, cloud, applications, identity, and operational technology or manufacturing environments.

Preferred Qualifications

• CISSP, CISM, GIAC, or comparable industry-recognized certification; master’s degree in a relevant discipline preferred.
• Cybersecurity leadership experience within global manufacturing, industrial technology, critical infrastructure, defense, aerospace, or a Fortune 1000 enterprise.
• Deep expertise in OT and industrial control system security, plant environments, connected products, and cyber-physical risk.
• Proven success building intelligence-led defense through government, national security, information-sharing, or industry partnerships.
• Working knowledge of NIST CSF, ISO 27001, CMMC, SOX, global privacy requirements, and other relevant regulatory frameworks.
• Strong understanding of AI governance, securing AI solutions, AI-enabled cyber defense, emerging AI threats, and responsible AI practices.
• Demonstrated ability to explain complex technology and risk topics, influence executive decisions, and engage effectively with a Board of Directors.
• Track record of building exceptional teams, developing senior leaders, and improving organizational capability and succession depth.
• Broad business and technology acumen across enterprise architecture, cloud, digital products, manufacturing operations, financial planning, and operating model design.
• Known for setting a high bar, translating strategy into practical roadmaps, and delivering measurable outcomes with urgency and accountability.

Annual Salary Range: $340,000 - $390,000. Actual salaries will vary based on several factors including, but not limited to applicable work experience, training, education, performance.  

This position is eligible for annual incentive plan based on performance and company growth. 

Immigration Sponsorship Not Available:

• Applicants for this position must be currently and legally authorized to work in the United States without the need for current or future sponsorship (e.g., H-1B, J-1, F-1, CPT, OPT, etc.).
• Donaldson will not offer immigration sponsorship or assume sponsorship of an employment visa for this position.
• International relocation or remote work arrangements outside of the U.S. will not be considered.

Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.

Donaldson Company has been made aware that there are several recruiting scams that are targeting job seekers.  These scams have attempted to solicit money for job applications and/or collect confidential information, Donaldson will never solicit money during the application or recruiting process.  Donaldson only accepts online applications through our Careers | Donaldson Company, Inc. website and any communication from a Donaldson recruiter would be sent using a donaldson.com email address.  If you have any questions about the legitimacy of an employment opportunity, please reach out to talentacquisition@donaldson.com to verify that the communication is from Donaldson.

Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.