Who is the CISO of Phillips 66?

Connie Devine is the current Chief Information Security Officer (CISO) of Phillips 66 on CISO Tribune's record, appointed in the week of June 1, 2026.

How many security-leadership moves has CISO Tribune tracked at Phillips 66?

CISO Tribune has tracked 2 moves at Phillips 66 since June 1, 2026.

When was Connie Devine appointed at Phillips 66?

Connie Devine's appointment as Chief Information Security Officer (CISO) of Phillips 66 was announced in the week of June 1, 2026, per SecurityWeek Industry Moves (week of 2026-06-01).

Where did Connie Devine work before becoming Chief Information Security Officer (CISO) of Phillips 66?

Connie Devine was promoted from within: the record of the appointment gives the previous role as Deputy CISO at Phillips 66.

Who held the seat at Phillips 66 before Connie Devine?

The previous holder on CISO Tribune's record is Michael Morgan, Chief Information Security Officer (CISO), whose departure was announced in the week of June 1, 2026.

Which board body oversees cybersecurity at Phillips 66?

Phillips 66's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit and Finance Committee.

Company record

Phillips 66 CISO: Connie Devine

The current Chief Information Security Officer (CISO) of Phillips 66, as tracked by CISO Tribune, is Connie Devine, whose appointment was announced in the week of June 1, 2026 (SecurityWeek Industry Moves (week of 2026-06-01)). An internal promotion: Connie Devine was previously Deputy CISO at Phillips 66. Read the record. The record entered the Wire on September 24, 2026.

Career profile: Connie Devine on CISO Spotlights ↗

What Phillips 66 tells the SEC

Its fiscal 2025 Form 10-K, filed February 20, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit and Finance Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Tracked by the Wire since June 1, 2026 · 2 recorded moves · every claim links to a sourced record · Updated September 24, 2026

Where Phillips 66 appears on the record (4)

Every page on CISO Tribune and its network that carries this company, 4 in all.

On the Wire (2): Connie Devine named Chief Information Security Officer (CISO) at Phillips 66 · 2026-06-01
Michael Morgan steps down as Chief Information Security Officer (CISO) of Phillips 66 · 2026-06-01
SEC filing: Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 20, 2026
Career profile: Connie Devine on CISO Spotlights ↗

How the top security seat at Phillips 66 has changed hands

CISO Tribune's record names 2 people in the top security seat at Phillips 66, the most recent first. Each line rests on the record linked beside it.

Connie Devine: named Chief Information Security Officer (CISO), announced in the week of June 1, 2026 (record). The appointment and Michael Morgan's departure were announced in the same month.
Michael Morgan: Chief Information Security Officer (CISO); departure announced in the week of June 1, 2026 (record).

About Phillips 66

CISO Tribune's Leadership Bench files Phillips 66 under Industrial & Energy and North America. The SEC classifies it under standard industrial classification 2911, Petroleum refining, and EDGAR lists its ticker as PSX. The Wire has 2 security-leadership moves at Phillips 66 on record, the earliest announced in the week of June 1, 2026.

What Phillips 66's 10-K says about security governance

Phillips 66's fiscal 2025 Form 10-K, filed February 20, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

Top security role, as the filing names it: Chief Information Security Officer.
Board oversight: the Audit and Finance Committee.
“The Audit and Finance Committee (A&FC) of the Board of Directors oversees the company's Enterprise Risk Management (ERM) program, including the processes that management uses to assess, identify, and manage risks associated with cybersecurity and information technology.”
Experience of the security leadership, as the filing states it:
“The CISO has extensive cybersecurity knowledge and skills gained through company experience and prior law enforcement service, supported by advanced professional certifications.”
Material incidents: the filing states none.
“We have experienced actual and attempted cybersecurity events and incidents on our networks and systems in the past; however, we do not believe that any of these events or incidents, individually, or in the aggregate, have materially affected our business, operations, or financial condition, or are reasonably likely to have such an effect.”

Plain-English reading and full text of the filing · the filing on sec.gov

Security leadership timeline

2026-06-01

Connie Devine named Chief Information Security Officer (CISO) at Phillips 66

Connie Devine has been promoted to CISO at Phillips 66, replacing Michael Morgan, effective June 1.

2026-06-01

Michael Morgan steps down as Chief Information Security Officer (CISO) of Phillips 66

Michael Morgan is being replaced as CISO at Phillips 66 by Connie Devine, effective June 1.

Previous security leaders of Phillips 66

Michael Morgan: Chief Information Security Officer (CISO); departure announced in the week of June 1, 2026 record

Security chiefs at other Industrial & Energy organizations

Other organizations CISO Tribune files under Industrial & Energy with a named security chief on record: those in North America first, in alphabetical order from Phillips 66 onward.

The Goodyear Tire & Rubber Company: Thomas Dager, Vice President and Chief Information Security Officer.
Vantage: Dale Drew, Chief Information Security Officer.
ADM: Ruben D. Chacon, Vice President and Global Chief Information Security Officer.
Brunswick: Julie Myerholtz, Vice President – Chief Information Security Officer.
Deere: James Johnson, Vice President and Chief Information Security Officer.
EverLine: Jason Cradit, Chief Technology Officer and Chief Information Security Officer.
Eversource Energy: Michael Tetto, Chief Information Security Officer (CISO).
FirstEnergy: Brian Harrell, Vice President and Chief Security Officer.

The full Industrial & Energy bench

Questions CISOs ask about Phillips 66

Who is the CISO of Phillips 66?: Connie Devine is the current Chief Information Security Officer (CISO) of Phillips 66 on CISO Tribune's record, appointed in the week of June 1, 2026.
How many security-leadership moves has CISO Tribune tracked at Phillips 66?: CISO Tribune has tracked 2 moves at Phillips 66 since June 1, 2026.
When was Connie Devine appointed at Phillips 66?: Connie Devine's appointment as Chief Information Security Officer (CISO) of Phillips 66 was announced in the week of June 1, 2026, per SecurityWeek Industry Moves (week of 2026-06-01).
Where did Connie Devine work before becoming Chief Information Security Officer (CISO) of Phillips 66?: Connie Devine was promoted from within: the record of the appointment gives the previous role as Deputy CISO at Phillips 66.
Who held the seat at Phillips 66 before Connie Devine?: The previous holder on CISO Tribune's record is Michael Morgan, Chief Information Security Officer (CISO), whose departure was announced in the week of June 1, 2026.
Who are the security chiefs at other Industrial & Energy organizations?: On CISO Tribune's record they include Thomas Dager at The Goodyear Tire & Rubber Company, Dale Drew at Vantage, Ruben D. Chacon at ADM and Julie Myerholtz at Brunswick.
Which board body oversees cybersecurity at Phillips 66?: Phillips 66's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit and Finance Committee.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.