Chief Security Officer

The Chief Security Officer (CSO) owns the protection of Xerox worldwide — across both cyber and physical domains. Reporting to the Chief Technology Officer, this leader sets and executes a single, converged security strategy covering enterprise information security, product and infrastructure security, physical and site security, and executive protection.

This is a technologist's seat, not a governance seat. Xerox is looking for a hands-on practitioner-leader who has personally run both infrastructure and cyber organizations, who has led offensive and defensive operations, and who has stood up incident response for cyber and physical events alike. The CSO operates as a peer to the enterprise technology team, and is expected to support decisions across the full technology estate — not only within the security perimeter.

Artificial intelligence is reshaping attacker capability, defender economics, and the physical threat surface simultaneously. Xerox is looking for a leader who has already formed a clear point of view on what that means and what a complete technology-organization response requires across cyber, physical, technology, AI, and data.

• Full converged mandate. Single accountability for cyber and physical security across a global, multi-brand enterprise — an unusually broad remit for a security leader.
• Executive and Board visibility. Direct engagement with the Executive Committee, the Board, and enterprise risk committees on security posture, investment, and risk appetite.
• Build the AI-era security model. Define how a global technology organization defends against AI-enabled adversaries while safely enabling Xerox's own AI and dat ambitions.
• Shape enterprise technology, not just security. Partner across infrastructure, applications, AI, and data to influence architecture and operating decisions at enterprise scale.
• Lead a global team. Build, develop, and lead a distributed security organization spanning in-house teams, global competency centers, and managed partners.

• Own a single enterprise security strategy spanning cyber and physical security, with unified policies, standards, control frameworks, and security architecture.
• Set risk appetite in partnership with the CTO, CIO, executive leadership, and enterprise risk committees; establish key risk indicators and drive measurable risk reduction.
• Align the security operating model to Xerox's business strategy, integration agenda, and technology roadmap.

• Lead threat detection, threat hunting, security operations, vulnerability management, and red/purple team functions with an offensive-minded posture that anticipates and hunts rather than waits.
• Own enterprise security architecture across network, cloud, endpoint, identity, application, and OT/device environments.
• Own the secure software development lifecycle and product security for Xerox products, services, and connected devices.

• Lead global physical security across corporate sites, manufacturing and distribution facilities, and field operations — including access control, surveillance, insider threat, and workplace violence prevention.
• Own the executive protection program, including travel risk, event security, and threat assessment for senior leadership.
• Lead physical incident response and crisis management; integrate physical and cyber response into a single, exercised playbook covering converged threat scenarios.
• Partner with Legal, HR, Real Estate, and Operations on investigations, business continuity, and site resilience planning.

• Define and execute Xerox's point of view on AI in security across three fronts:…