Skip to content
CISO Spotlights

Career profile

Connie Devine

Chief Information Security Officer, Phillips 66

Status
Current role, per sources checked 1 June 2026
Appointed
1 June 2026
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

Connie Devine is Chief Information Security Officer at Phillips 66, the energy refining and marketing company, effective June 1, 2026. She moved into the seat directly from the deputy role at the same company.

Career path

Before her security roles at Phillips 66, SecurityWeek's industry-moves column reports that Devine worked at three other energy and industrial companies. A CS4CA USA conference speaker listing, compiled while she was still Deputy CISO, describes more than two decades in the field. The same listing names her as a board member of ONE-ISAC, the information sharing and analysis center for the oil and natural gas sector. A SecureWorld speaker page, current at the time this session fetched it, lists the same deputy title.

What the record does not show

None of the sources reviewed for this profile give the calendar date Devine first joined Phillips 66, the length of her tenure at each of Excelerate Energy, ExxonMobil or Honeywell, or a breakdown of what her CISO remit at Phillips 66 covers day to day. What the record does establish is a clean, single-company promotion path: over a year as Deputy CISO at Phillips 66, a board seat at the sector's information-sharing body, and then the top security title at the same company starting June 1, 2026. Read across the three sources for this profile, the sequence is consistent: three earlier stops in the energy and industrial sector at Excelerate Energy, ExxonMobil and Honeywell, then more than a year as deputy security lead at Phillips 66, alongside a board role at ONE-ISAC, before the promotion to the top security title on June 1, 2026. Both conference speaker pages describe her deputy title in identical terms, which corroborates the SecurityWeek account of an internal, single-company move into the CISO seat rather than a hire from outside.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · published 1 June 2026 · checked 27 September 2026 · tier B
  2. 2.
    CS4CA USAusa.cs4ca.com · undated page · checked 27 September 2026 · tier A
  3. 3.
    SecureWorldevents.secureworld.io · undated page · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.