LiveWire Group: its contracted CISO function passed through two acting roles, 2025

LiveWire Group, the electric-motorcycle maker spun off from Harley-Davidson, discloses a CISO situation that isn't its own hire at all: its cybersecurity program is contracted through and led by Harley-Davidson's own CISO function, so when that seat changed hands twice in a year, LiveWire's own 10-K had to describe it.

"In October 2025, the CISO left Harley-Davidson and the Chief Digital and Operations Officer assumed the responsibilities of acting CISO from October until his departure on December 31, 2025," the filing states. It continues: "Harley-Davidson's IT Security Manager is serving as acting CISO, executing all the responsibilities of the CISO, while Harley-Davidson conducts a search to fill the position."

The filing states Harley-Davidson's IT Security Manager has over 20 years of IT experience, including 13 years focused on cybersecurity, and that the CISO function reports to Harley-Davidson's Chief Legal, Compliance and Corporate Affairs Officer. LiveWire does not name any of the three people who held or are holding the acting role, and the search for a permanent CISO is Harley-Davidson's, not LiveWire's own, though LiveWire's security program depends on its outcome.

See the interim and acting CISO record for other companies naming a temporary security leader in an SEC filing, with no comparison or ranking implied.