The construction and infrastructure sector is undergoing rapid digital transformation, integrating IoT, smart building technologies, and advanced project management platforms. These developments bring efficiency but also increase exposure to cyber risks. The following CISOs are leading efforts to secure critical infrastructure, protect sensitive data, and align cybersecurity with business and operational goals across global projects.
Christopher Lukas – Global CISO, Bechtel Corporation
Christopher Lukas brings a unique blend of military, government, start-up, and Fortune 50 experience to his role as Global CISO at Bechtel. He specializes in building mature cybersecurity intelligence and operations centers, leading digital transformations, and fostering people development. Lukas is known for aligning cybersecurity initiatives with business strategy, ensuring that digital transformation efforts improve operational performance and customer experience. His collaborative approach includes working closely with industry peers, government agencies, and technology partners to protect information assets across large, complex projects worldwide.
Darren Albers – CISO, Fluor Corporation
Darren Albers serves as Head of Information Security at Fluor, a global Fortune 200 engineering and construction firm. He has extensive experience in cybersecurity, compliance, and risk management across transportation, manufacturing, engineering, and energy sectors. Albers leads global security programs that safeguard enterprise systems while enabling business growth, focusing on scalable, risk-based approaches to protect sensitive information and critical operations. His leadership balances technical rigor with business alignment, ensuring that security programs enhance both resilience and project delivery outcomes.
Benoît Herment – Group CISO, Vinci
Benoît Herment is the Group CISO at Vinci, a multinational leader in construction and concessions. He oversees the company’s information security across 120 countries, ensuring compliance with ISO 27001 and other industry standards. Herment specializes in cybersecurity strategy, IS transformation, and managing multicultural teams. He brings extensive experience in security architecture, IT audit, and regulatory compliance, safeguarding sensitive data while enabling operational efficiency in large-scale infrastructure projects.
Phil Cook – IT Security Specialist, Balfour Beatty
Phil Cook manages the cybersecurity posture of Balfour Beatty, protecting identities, services, and cloud platforms. With over 30 years in IT and security, he excels in incident management, threat hunting, and vulnerability remediation. Cook brings technical expertise in Microsoft and Citrix technologies and ensures security measures scale effectively across infrastructure and construction projects. He combines technical skills with strong interpersonal and leadership capabilities, mentoring teams while improving organizational resilience and security awareness.
David Sheidlower, CISSP, CISM – VP, Chief Information Security & Privacy Officer, Turner Construction Company
David Sheidlower leads IT security and privacy at Turner Construction Company, balancing business objectives with regulatory requirements. He designs and implements security and governance programs that foster a security-aware culture. Sheidlower is recognized for his thought leadership in cybersecurity across construction, healthcare, and financial services, ensuring that security initiatives align with operational and strategic goals while mitigating cyber and compliance risks.
Uday Deshpande, CISA, CISSP, CEH, ISO27001LA – Group CISO, Larsen & Toubro
Uday Deshpande is a global cybersecurity leader at Larsen & Toubro, guiding information security strategy, risk management, and compliance. With over 20 years of experience, he builds cohesive security teams, aligns IT security with business objectives, and implements innovative technologies to protect enterprise information assets. Deshpande is skilled in securing complex, multi-national construction and engineering operations, ensuring regulatory adherence and business continuity.
Charl Brits, CISSP, ISSMP, SABSA, TOGAF – Group CISO, Laing O’Rourke
Charl Brits oversees cybersecurity strategy for Laing O’Rourke, a multinational engineering and construction firm. He has successfully grown the cyber function from 3 to 14 specialists, enhancing risk management, governance, and compliance across global projects. Brits ensures that security initiatives align with business strategy, supports ISO 27001 certification, and integrates cybersecurity into operational and infrastructure planning. His approach balances technical solutions with organizational change management.
Enrique Miranda Salado – Global CISO, Ferrovial Energy | Global Head of OT Cybersecurity, Ferrovial Group
Enrique Miranda leads cybersecurity and operational technology security for Ferrovial, a global construction and infrastructure company. With more than 20 years of experience, he advises boards and executive teams on cyber resilience, regulatory compliance, and risk management. Miranda specializes in IT/OT security integration, critical infrastructure protection, and aligning security strategy with business objectives. He also contributes as a board advisor and academic, sharing expertise on cybersecurity strategy and governance across energy, infrastructure, and construction sectors.
Building Resilience: CISOs Securing Construction and Infrastructure
The construction and infrastructure sector faces growing cyber threats as projects integrate digital systems and connected technologies. These CISOs exemplify leadership in managing cybersecurity risk, safeguarding critical assets, and aligning security with business operations. Their work ensures that large-scale construction and infrastructure projects remain resilient, efficient, and secure, setting the standard for cybersecurity excellence in a sector essential to global development.
