Oil and gas
10 CISOs in Oil and Gas
These ten chief information security officers lead or have led security programs at oil and gas companies including Equinor, Woodside Energy, ConocoPhillips, ExxonMobil, Shell and Marathon Petroleum Corporation. A reader can learn how energy security leaders approach IT and OT cyber risk, governance and resilience for critical operations.
Professionals to explore
01—10Annessa McKenzie
LinkedInExperience: Chief Information Security Officer, Vice President Enterprise Architecture IT Corp Business Apps · ConocoPhillips
Chief Information Security Officer, Vice President Enterprise Architecture IT Corp Business Apps at ConocoPhillips since May 2022. Former Chief Security Officer VP of Supply Chain at Calpine (2015–2022) and Chief Information Security Officer at Baker Hughes (2006–2015); the profile also lists adjunct roles at the University of Oklahoma since 2022.
Antoinette Jago (GAICD)
LinkedInExperience: Chief Information Security Officer · Woodside Energy
Chief Information Security Officer at Woodside Energy since December 2024, and former Head of Cyber Delivery & Performance there (2024). The profile also lists Microsoft roles including Azure Cloud Solution Specialist (2013–2024), Enterprise Security Exec - Cybersecurity Solutions Group at Microsoft (2021–2022) and Modern Work and Security Specialist (2018–2021).
Clinton Wilson
LinkedInExperience: Chief Information Security Officer · HF Sinclair
Chief Information Security Officer at HF Sinclair since October 2024; the profile describes leading enterprise cybersecurity, technology risk and operational resilience for a publicly traded global refining, lubricants and marketing organization. Former Director, Cybersecurity and Infrastructure (2022–2024) and Director, Critical Infrastructure and Operational Technology - Midstream (2018–2022) at Marathon Petroleum Corporation.
Joao Neves
LinkedInExperience: CISO - GM Governance & Risk · Shell
CISO - GM Governance & Risk at Shell since March 2025. Other Shell roles on the profile include Global Information & Digital Services and Operations Manager - Shell Mobility (2023–2025), Info Risk Manager - Projects and Technology, Upstream, Integrated Gas, Renewables & Energy Solutions (2021–2022) and Global Information Risk Manager - Integrated Gas, New Energies and Upstream (2020–2021).
Joni Richardson
LinkedInExperience: Chief Information Security Officer · Continental Resources
Chief Information Security Officer at Continental Resources since October 2024; the profile describes the company as the world's largest privately held oil and natural gas company. Former Senior Information Security Manager (2023–2024), Information Security Manager (2020–2024) and Data Security Advisor - Information Security (2017–2020) at Continental Resources.
Marco Antonio Cabrera Ovando
LinkedInExperience: CISO (Responsable de Seguridad de la Información) · Pluspetrol
CISO (Responsable de Seguridad de la Información) at Pluspetrol since November 2021; the profile describes Pluspetrol as the leading private oil and gas company in Latin America. Former CISO (Chief Information Security Officer) at GeoPark (2018–2021), CISO (Chief Information Security Officer) at Newsan (2016–2018) and Chief IT Audit at AXION energy (2014–2016).
Mary Rose Martinez
LinkedInExperience: Chief Information Security Officer and Vice President of Infrastructure · Marathon Petroleum Corporation
Chief Information Security Officer and Vice President of Infrastructure at Marathon Petroleum Corporation since May 2024, and former Vice President, Chief Information Security Officer there (2021–2024). The profile also lists Chief Information Security Officer and Vice President, IT Architecture at Halliburton (2021) and Board Member and Treasurer at the Oil and Natural Energy Information Sharing and Analysis Center (ONE-ISAC) (2019–2025).
Milton Guerrero
LinkedInExperience: Chief Information Security Officer · Hunt LNG Operating Company S.A.C.
Chief Information Security Officer at Hunt LNG Operating Company S.A.C. since December 2021 and Global Chief Information Security Officer at Hunt Services Company since March 2025. The profile cites 30+ years leading cybersecurity strategy in critical infrastructure environments, including 18 years in the Oil & Gas sector, and designing and executing enterprise-wide IT/OT cybersecurity programs.
Shazad Shafi
LinkedInExperience: OT Chief Information Security Officer (OT CISO) · ExxonMobil
OT Chief Information Security Officer (OT CISO) at ExxonMobil since December 2023; the profile describes enhancing cybersecurity resilience to support safe and secure operations and protecting sensitive data. Other roles on the profile include Manager, ExxonMobil Kuala Lumpur Technology Center (2017–2019) and Operations Manager - Cental South and North West Region at ExxonMobil Pipeline Company (2014–2017).
Sindre Skjønsberg
LinkedInExperience: Chief Information Security Officer · Equinor
Chief Information Security Officer at Equinor since January 2026. Other Equinor roles on the profile include IT Disaster Recovery Officer (2023–2026), Lead Information Security Analyst (2021–2023), Principal Information Security Analyst (2018–2021) and Senior Information Security Analyst (2015–2018).
Choose the right perspective
Match the person's part of the industry to yours, since upstream producers, refiners, LNG operators and pipeline companies run different operational technology and face different regulators. For plant and field control system questions, favor someone whose roles include OT or critical infrastructure security; for enterprise governance and board reporting, favor someone who has led a corporate security program.
Questions to take into the conversation
- 01How do you split responsibility for IT and OT security between corporate security, engineering and operations teams?
- 02What does a realistic incident response plan look like for a refinery, pipeline or offshore asset?
- 03How do you prioritize security spending across legacy control systems, cloud adoption and third-party access?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot and may describe past or present roles. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal