Executive record
Brian Harrell
Career profile: Brian Harrell on CISO Spotlights ↗
Brian Harrell is Vice President and Chief Security Officer at FirstEnergy. The appointment was announced on April 9, 2026, per FirstEnergy.
Before the appointment: Vice President and Chief Security Officer at Avangrid, per the same source.
1 tracked move on the Wire · Updated
Career timeline
Every move the record holds for Brian Harrell, newest first, with the earlier roles the announcements name.
· Appointment
Named Vice President and Chief Security Officer at FirstEnergy
Before April 2026· Earlier role
Vice President and Chief Security Officer at Avangrid
Named in the announcement of the FirstEnergy appointment · Source: FirstEnergy (company announcement) ↗
The appointment
Announced April 9, 2026 · Source: FirstEnergy (company announcement) ↗ · Move record
FirstEnergy appointed Brian Harrell, a former senior U.S. homeland security official, as Vice President and Chief Security Officer, the utility announced on April 9, 2026. Harrell most recently held the same title at Avangrid, where he oversaw cybersecurity, physical security, intelligence, privacy and resilience across a multistate energy portfolio.
The appointment puts cyber and physical security under one executive, the converged model Harrell ran at Avangrid.
According to the company, his remit takes in enterprisewide cybersecurity, threat intelligence, security architecture and engineering, risk and compliance, corporate and field security, and 24/7 security operations. FirstEnergy says Harrell will report to Toby Thomas, the company's Chief Operating Officer. The company says Harrell is to strengthen defenses, expand detection and response capabilities driven by intelligence, and build security further into business and operational planning. According to FirstEnergy, his work will place emphasis on readiness, training and coordination among field and corporate teams.
The company says Harrell previously held senior roles in the U.S. Department of Homeland Security, among them at the Cybersecurity and Infrastructure Security Agency. According to the release, at CISA he often testified before Congress about protecting critical infrastructure and countering domestic terrorism. FirstEnergy says that during his time at Avangrid he established 24/7 security operations centers and enhanced intelligence and threat detection capabilities. He also expanded security team capacity at Avangrid and regularly briefed boards and executive leadership on preparedness and security risks, the company says.
The company says Harrell held leadership roles in enterprise security at the North American Electric Reliability Corporation and Duke Energy, working closely with local, state and federal partners on risk mitigation and critical infrastructure protection. The company says Harrell holds a bachelor's degree in criminal justice as well as advanced degrees in education and homeland security. According to the release, his professional certifications include Certified Protection Professional and Certified Information Security Manager.
FirstEnergy made the appointment as U.S. utilities confront cyber and physical security threats that the company describes as increasingly complex. FirstEnergy says its electric distribution companies serve more than 6 million customers across Ohio, New York, Pennsylvania, Maryland, New Jersey and West Virginia. According to the company, its transmission subsidiaries run more than 24,000 miles of transmission lines linking the Midwest and Mid-Atlantic regions.
The company: FirstEnergy
- Sector
- Industrial & Energy
- Region
- North America
- Company record
- Who runs security at FirstEnergy: 1 confirmed move on the record
- Annual report
- Cybersecurity section of the fiscal 2025 Form 10-K, filed February 18, 2026
- Reporting line
- The filing describes the role that runs security as CISO, reporting to the FirstEnergy's Chief Information Officer.
- Board oversight
- Named in the filing: Audit Committee.
In their own words
What Brian Harrell has posted and written in public while in the seat, each described in our words with a link to the original. A post loads from LinkedIn or X only when you choose Show post. All voices
Elsewhere
Public profiles we matched to Brian Harrell by exact name and the company on our record. Links only; we do not copy from them.
Appointed in the same period
Other security chiefs in Industrial & Energy whose appointment was announced within 90 days of Brian Harrell's, nearest first. The Industrial & Energy bench
Michael Tetto, Chief Information Security Officer (CISO) at Eversource Energy
Connie Devine, Chief Information Security Officer (CISO) at Phillips 66
Record facts
- Time in the seat
- 7 months since the appointment was announced (April 9, 2026), as of November 2026
- Moves on the record
- 1 confirmed move, each with its source
- On the record since
- September 25, 2026
- Industrial & Energy in 2026
- 9 security-leadership appointments announced in the sector on the record
How these are counted. Time in the seat: Counted in whole months from the announcement of the appointment, the date the record holds; announcements rarely give a start date.
Questions about Brian Harrell
- Who leads security at FirstEnergy?
- Brian Harrell is Vice President and Chief Security Officer at FirstEnergy. The appointment was announced on April 9, 2026, per FirstEnergy.
- When did Brian Harrell become Chief Security Officer of FirstEnergy?
- The appointment was announced on April 9, 2026, per FirstEnergy. The record holds the announcement, not a start date.
- Where did Brian Harrell work before FirstEnergy?
- Before the appointment, Brian Harrell was Vice President and Chief Security Officer at Avangrid, according to the announcement (FirstEnergy).
- Who does the head of security at FirstEnergy report to?
- In its fiscal 2025 annual report (Form 10-K, filed February 18, 2026), FirstEnergy describes the role that runs security as CISO, reporting to the FirstEnergy's Chief Information Officer.
Sources
- 1.FirstEnergy (company announcement) ↗: the appointment at FirstEnergy, April 9, 2026
- 2.SEC EDGAR: Form 10-K, fiscal 2025 ↗: the company's cybersecurity disclosure
- 3.CISO Spotlights career profile ↗: a fuller career profile on a sister site
This record begins with CISO Tribune's tracking in 2026.
Related guides

CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.

How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.