Company record
FirstEnergy Vice President and Chief Security Officer: Brian Harrell
The current Vice President and Chief Security Officer of FirstEnergy, as tracked by CISO Tribune, is Brian Harrell, whose appointment was announced on April 9, 2026 (FirstEnergy (company announcement)). Previously Vice President and Chief Security Officer at Avangrid. Read the record. The record entered the Wire on .
Career profile: Brian Harrell on CISO Spotlights ↗
What FirstEnergy tells the SEC
Its fiscal 2025 Form 10-K, filed February 18, 2026, carries an Item 1C cybersecurity disclosure that describes a CISO reporting to the FirstEnergy's Chief Information Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since April 9, 2026 · 1 recorded move · every claim links to a sourced record · Updated
Where FirstEnergy appears on the record (3)
Every page on CISO Tribune and its network that carries this company, 3 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 18, 2026
- Career profile
About FirstEnergy
CISO Tribune's Leadership Bench files FirstEnergy under Industrial & Energy and North America. The SEC classifies it under standard industrial classification 4911, Electric services, and EDGAR lists its ticker as FE. The Wire has one security-leadership move at FirstEnergy on record, announced on April 9, 2026.
What FirstEnergy's 10-K says about security governance
FirstEnergy's fiscal 2025 Form 10-K, filed February 18, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Reporting line: the CISO reports to the FirstEnergy's Chief Information Officer.
“The CISO reports directly to FirstEnergy's Chief Information Officer, who is responsible for all of FirstEnergy's digital and technology services and is FirstEnergy's most senior information technology executive.”
Board oversight: the Audit Committee.
“The Audit Committee has primary responsibility to oversee the disclosure of material cyber security incidents, as well as the general obligation to ensure the proper risk oversight structure of cyber security as part of FirstEnergy's overall enterprise risk management program and the internal controls applicable to cyber security matters.”
Frameworks and standards the filing names: PCI DSS, NERC CIP and NIST (publication not named).
Experience of the security leadership, as the filing states it:
“FirstEnergy's CISO has over 30 years of cyber-experience with both large domestic and international companies, and holds an ISC2 Certified Information Systems Security Professional certification.”
Material incidents: the filing states none.
“Although the risks from cyber threats have not materially affected FirstEnergy's business strategy, results of operations, or financial condition to date, FirstEnergy continues to closely monitor cyber risk.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
What Brian Harrell has said in public
CISO Tribune's Voices section carries 2 public posts and talks by Brian Harrell. The most recent are listed with their dates.
On a security leadership topic, LinkedIn, November 10, 2026.
On the Marine Corps birthday and seasonal tradition, LinkedIn, November 2, 2026.
Security chiefs at other Industrial & Energy organizations
Other organizations CISO Tribune files under Industrial & Energy with a named security chief on record: those in North America first, in alphabetical order from FirstEnergy onward.
NN, Inc.: Gregg Cottage, Chief Information Officer and Chief Information Security Officer.
Packsize: Troy Rydman, Chief Information Officer and Chief Information Security Officer.
Phillips 66: Connie Devine, Chief Information Security Officer (CISO).
The Goodyear Tire & Rubber Company: Thomas Dager, Vice President and Chief Information Security Officer.
Vantage: Dale Drew, Chief Information Security Officer.
ADM: Ruben D. Chacon, Vice President and Global Chief Information Security Officer.
Brunswick: Julie Myerholtz, Vice President – Chief Information Security Officer.
Deere: James Johnson, Vice President and Chief Information Security Officer.
Questions CISOs ask about FirstEnergy
- Who is the CISO of FirstEnergy?
- Brian Harrell is the current Vice President and Chief Security Officer of FirstEnergy on CISO Tribune's record, appointed on April 9, 2026.
- How many security-leadership moves has CISO Tribune tracked at FirstEnergy?
- CISO Tribune has tracked 1 move at FirstEnergy since April 9, 2026.
- When was Brian Harrell appointed at FirstEnergy?
- Brian Harrell's appointment as Vice President and Chief Security Officer of FirstEnergy was announced on April 9, 2026, per FirstEnergy (company announcement).
- Where did Brian Harrell work before becoming Vice President and Chief Security Officer of FirstEnergy?
- The record of the appointment gives Brian Harrell's previous role as Vice President and Chief Security Officer at Avangrid.
- Who are the security chiefs at other Industrial & Energy organizations?
- On CISO Tribune's record they include Gregg Cottage at NN, Inc., Troy Rydman at Packsize, Connie Devine at Phillips 66 and Thomas Dager at The Goodyear Tire & Rubber Company.
- Has Brian Harrell spoken or written publicly?
- CISO Tribune's Voices section carries 2 public posts and talks by Brian Harrell, the most recent dated November 10, 2026.
- Who does the security chief of FirstEnergy report to?
- FirstEnergy's fiscal 2025 Form 10-K, filed February 18, 2026, says its CISO reports to the FirstEnergy's Chief Information Officer.
- Which board body oversees cybersecurity at FirstEnergy?
- FirstEnergy's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.