• Develop and execute the enterprise-wide information security strategy, overseeing risk management, governance, compliance, and threat mitigation to protect highly sensitive data, intellectual property, customer environments, and Mission Hero infrastructure. • Serve as the organization's executive risk authority, the final decision-maker on security posture decisions with enterprise-level impact, and primary advisor to the CEO and senior leadership on cyber risk, emerging threats, and business impact. • Partner with the CEO, General Counsel, and business development leadership to align security investments with contract requirements, growth objectives, and mission priorities. • Represent Defense Unicorns' security posture in customer-facing engagements, contract negotiations, government interactions, and partnership discussions. • Provide executive oversight to the Director of Security Compliance and Director of Information Technology, ensuring cohesion between compliance obligations, IT infrastructure, and security operations. • Foster a collaborative, mission-first security culture, one that empowers Unicorns to move fast while minimizing risk to the business and our customers. • Own and execute on a strategy for responsible, cross-cutting AI usage in all functions which enables Unicorns while maintaining a verifiable information security posture. • Adapt Defense Unicorns application security processes to the AI-native threat hunting realities. Operate and scale bug triage and/or bounty programs that are compatible with Open Source software practices and the trends in responsible disclosure. • Build and scale defensive security tooling that enables teams to shift-left and safeguard themselves and their work products, from emergent threats including software supply chain security, advanced security hunting, and advanced foreign actors. • Lead cross-functional efforts to safeguard production infrastructure, cloud platforms, and mission-critical systems against advanced cyber threats, ensuring resilience, regulatory adherence, and alignment with strategic business objectives. • Build and lead a high-performing security engineering function responsible for securing Defense Unicorns' production environments and customer-facing platforms, including architecture, hardening, threat detection, and defensive controls across cloud, hybrid, and on-premise infrastructure. • Direct strategy for security architecture and infrastructure protection at scale, setting the technical vision while empowering the Director of IT to implement. • Champion automation of security processes to reduce mean time to detection and containment, and drive continuous improvement across security operations. • Serve as the executive sponsor for the Incident Response program, ensuring the function is cross-trained, playbook-ready, and compliant with DFARS 252.204-7012 government notification requirements. • Own the enterprise Governance, Risk, and Compliance (GRC) framework, setting policy standards, defining residual risk thresholds, and ensuring accountability across organizational units. • Provide executive sponsorship for the CMMC Level 2 compliance program, maintaining accountability for DFARS 252.204-7012 and 7021 posture, POA&M governance, and C3PAO assessment readiness across all contract vehicles. • Oversee the third-party risk management (TPRM) program and supply chain risk management aligned to NIST SP 800-161, providing final approval authority on technology investments with compliance implications. • Serve as the executive interface for government regulatory agencies, C3PAO assessors, and auditors. • Report on cyber risk posture, program health, and compliance status to senior leadership on a regular cadence. • Build and sustain a security-aware culture across the organization, one that treats security as mission-enabling, not mission-blocking. • Lead enterprise security awareness and training programs, ensuring all Unicorns and contractors understand their role in maintaining the company's security posture. • Communicate complex security concepts clearly to diverse audiences, from engineers and operators to executives, board members, and government stakeholders. • Advocate for risk-informed decision-making at every level, empowering teams to operate confidently within well-understood guardrails.

Role Description Eaton’s corporate legal team is seeking a Senior Counsel to support the enterprise’s cybersecurity function. The preferred location for this position is either our corporate office in Beachwood, OH or in Moon Township, PA, but remote work from the Eastern or Central time zone is available. Some travel is expected (~10%). The Senior Counsel role will lead a cross-functional cybersecurity legal program that integrates security operations, incident response, governance, and regulatory/data privacy compliance, while advancing responsible AI security and risk management. This role serves as the legal bridge among Cybersecurity, IT, OT, Communications, HR, and Finance, ensuring the company can prevent, detect, respond to, and recover from cyber incidents and AI-related risks while meeting global legal and regulatory obligations. The leader will drive tabletop exercises, oversee policy/playbook development, guide product and enterprise security reviews, and act as a primary legal cyber advisor to executives during IT/OT security and AI governance events. Key Responsibilities - Incident Readiness & Response - Own the legal aspects of the enterprise incident response (IR) program including preparation, detection, response, recovery, and lessons learned; manage executive ready IR playbooks that clearly define roles functions. - Contribute by assisting with the planning, deployment, and debriefing tabletop exercises with internal teams and outside firms; track remediation items through to closure and report outcomes to senior leadership and the board. - Serve as on call executive advisor for material incidents, coordinating with security operations center, corporate event response team, outside counsel, insurers, regulators, and law enforcement as needed. - Ensure eDiscovery, privilege, and regulatory timeline considerations are embedded in IR workflows (e.g., notification triggers, insurer engagement). - Coordinate with Engineering and IT on AI incident reporting obligations under emerging regulations. - Security Governance, Risk & Compliance - Contribute to cross functional Cybersecurity/IT/OT governance forums; align policy and standards with Zero Trust, identity, network, cloud, and OT security programs. - Oversee policy lifecycle (draft, socialize, approve, measure), including AI security monitoring standards and privacy by design controls in partnership with Data Protection Privacy teams. - Direct risk assessments for major programs and products; track risk treatment plans and KRIs/KPIs in collaboration with GRC and Internal Audit. - Regulatory & Global Counsel Integration - Act as the executive point of contact for global cybersecurity and data protection laws (e.g., U.S. sectoral rules, EU NIS2/GDPR, China’s Cybersecurity Law), coordinating with regional counsel and external advisors to interpret obligations and translate them into operational controls. - Lead regulatory response readiness (notifications, supervisory inquiries, exam prep) and ensure documentation/attestations are accurate and defensible. - Track and interpret AI-related regulatory developments (EU AI Act, U.S. state AI laws) and translate them into actionable compliance requirements. - Enterprise & Product Security Reviews - Co-lead Cyber Product Review and security architecture gates for enterprise platforms and customer facing products/solutions; drive decision logs, actions, and risk acceptance processes with accountable owners (IT, Engineering, Product, Legal). - Expand Cyber Product Reviews to include AI risk assessments for products and internal tools; ensure secure model deployment and vendor risk evaluations. - Ensure integration, vulnerability management, and cloud security roadmaps; report progress, risks, and dependencies through executive dashboards. - Stakeholder Engagement & Communication - Provide board/C suite briefings on AI risk and cyber posture, material risks, control maturity, and incident updates, including emerging threats and compliance obligations; craft clear, business outcome focused narratives. - Partner with Corporate Communications to prepare proactive/reactive statements and media strategies as part of IR planning and exercises. - Coach and enable business/function leaders to own cyber risk within their domains. Qualifications - Juris Doctorate; licensed and in good standing to practice in at least one state - Experience working in a global law firm and a global corporation (in-house counsel) - Minimum of ten (10) years in cybersecurity, cyber risk, incident response, or closely related domains, with significant cross functional leadership. - Demonstrated experience leading complex incidents/tabletops and working directly with outside counsel/insurers/regulators. - Up to 10% travel - Eaton will not consider applicants for employment immigration sponsorship or support for this position. Preferred Qualifications - Certifications: CISSP, CISM, CISA, CCSP, or relevant privacy credentials (e.g., CIPP/E, CIPP/US, CIPM). - Experience with OT security governance and enterprise Zero Trust transformations. - Experience working within a complex, multinational company. - Experience within a manufacturer or other highly-engineered, physical product-based organization helpful. Skills - Strong command of global cyber/data protection frameworks - Proven ability to translate legal/regulatory obligations into executable controls and measurable program outcomes. - Executive presence; excellent written/oral communication with board level stakeholders. Benefits - Competitive pay and a variety of benefit programs for eligible employees. - The expected annual salary range for this role is $182,000 - $266,000 a year. - This role is also eligible for a variable incentive program.

• Track attorney fee payments issued by the Social Security Administration. • Monitor pending fee authorizations and follow up on outstanding payments. • Review Notices of Award, fee authorizations, and related SSA correspondence. • Research discrepancies between expected and received payments. • Communicate with SSA offices regarding payment status and fee-related inquiries. • Maintain accurate records of payment tracking. • Collaborate with attorneys, paralegals, and accounting teams to resolve payment issues. • Generate reports on outstanding fees and payment trends. • Ensure compliance with firm policies and SSA regulations.

Role Description The Fortinet Field CISO is a senior security, technology and policy advisor with a focus on thought leadership and being a trusted advisor to customers and prospects. You will operate at the intersection of executive influence, security strategy, and revenue, translating complex cybersecurity challenges into compelling business outcomes and positioning the Fortinet platform as the essential foundation of a modern security program. This is a rare opportunity to shape how the world's largest organizations think about security at the highest levels. We are looking for someone with more than 15 years of experience in the IT and/or OT (operational technology) security industry with a strong technical and commercial acumen, to act as a trusted advisor to the world’s largest organizations and help them improve their security postures and align security strategically with business initiatives. This person will report to the CISO, and support Fortinet’s sales, marketing, and communications teams in revenue growth by: - Helping them and partners successfully assess our technologies. - Soliciting business requirements/use cases. - Understanding how different platforms will work and integrate. - Developing a technical strategy. - Configuring and effectively demonstrating the solution that addresses partner/sales team requirements. - Working with the global delivery team to ensure the success of integration with other products (where necessary). The Field CISO will also work closely with Fortinet prospects and partners, as well as the company’s product managers and partner programs professionals to maximize the growth and expansion of Fortinet products by: - Targeting and developing strong relationships with new and existing partners and integrators globally. - Ensuring the sales goals of our global products. Qualifications - 15+ years of relevant work experience in security software, hardware, architecture, strategy, in part as a technology evangelist. - Demonstrated proficiency with security strategy, products, and ecosystems. - Highly networked in the CISO executive networks, including CISO coalitions and summits. - Exceptional negotiation, demonstration, presentation and interpersonal communication skills. - Deep expertise in at least two domains: cloud security, identity, threat detection & response, OT/ICS, or GRC. - Highly influential relationship builder. - Customer focused and commercially minded. - Proven track record in a similar role with clear evidence of successful execution. - Fortinet product knowledge and understanding of its developer ecosystem preferred. - Public speaking experience with great PowerPoint creation and presentation skills. - Established industry presence (speaking, writing, or advisory board participation). - Experience in a customer-facing or commercial role (sales, pre-sales, advisory, consulting, or fractional CISO). - Familiarity with AI/ML-driven security tools and emerging threat vectors. - Preferably experience in a CISO, Deputy CISO, Field CISO role or alternatively a senior vendor, consultancy, or analyst role alongside practitioner background. - Willing to travel within reason. Requirements - B.S./M.S. in Computer Science, Software Engineering. Benefits - Fortinet makes possible a digital world that we can always trust through its mission to protect people, devices, and data everywhere. - The Fortinet Security Fabric platform delivers broad, integrated, and automated protections across the entire digital attack surface. - Ranking #1 in the most security appliances shipped worldwide, more than 615,000 customers trust Fortinet to protect their businesses. - The Fortinet NSE Training Institute provides one of the largest and broadest training programs in the industry.