Connie Devine

The Chief Information Security Officer of Phillips 66 is Connie Devine, who took the seat on June 1, 2026 after more than a year as the company's Deputy CISO. SecurityWeek's industry-moves column reported the promotion and named her predecessor in the role, Michael Morgan. She moved into the top security job directly from the deputy role at the same company, a single-company promotion rather than an outside hire.

Career path

Before her security roles at Phillips 66, Devine worked at three other energy and industrial companies, according to SecurityWeek. A CS4CA USA conference speaker listing, written while she was still Deputy CISO, describes more than two decades in the field. The same listing names her as a board member of ONE-ISAC, the information sharing and analysis center for the oil and natural gas sector. ONE-ISAC's own event page for a members-only AI forum lists her among the panelists as a ONE-ISAC director and Phillips 66's Deputy CISO. A SecureWorld speaker page, still live, gives the same deputy title.

The seat she took over

Phillips 66's Form 10-K for fiscal 2025, filed February 20, 2026, sets out what the CISO seat covers. The CISO is responsible for assessing and managing risks from cybersecurity threats and leads the team that runs the company's cybersecurity and data protection practices. Board oversight sits with the Audit and Finance Committee, which receives written reports and periodic briefings from the CISO. The filing also says the CISO works with the company's Senior Counsel, Brand, Cyber & Privacy on legal, regulatory and contractual security requirements.

That filing came out three months before Devine's promotion, so its description of the CISO's background is a description of the previous holder. It says the CISO's knowledge came from company experience and prior law enforcement service. Dataminr's advisory-board page, which still lists Morgan as CISO at Phillips 66, says he spent 22 years as an FBI special agent. The handover brought a different background into the seat: Morgan came from federal law enforcement, Devine from inside the energy industry's own security teams.

What the record does not show

None of the sources reviewed give the date Devine first joined Phillips 66, how long she spent at each of Excelerate Energy, ExxonMobil and Honeywell, or who she reports to as CISO. The company's next annual report, for fiscal 2026, is the first filing that can describe her in the seat.

Who is the CISO of Phillips 66?

Connie Devine has been Chief Information Security Officer of Phillips 66 since June 1, 2026. She was promoted from Deputy CISO, a role she had held for more than a year.

Who was the Phillips 66 CISO before Connie Devine?

Michael Morgan. SecurityWeek reported that Devine's promotion replaced him, and Dataminr's advisory-board page describes him as a former FBI special agent of 22 years.

Who does the Phillips 66 CISO report to?

The company's 10-K does not name a management reporting line. It says the CISO briefs the Audit and Finance Committee of the Board of Directors, which oversees cybersecurity risk and reports to the full board.

Where did Connie Devine work before Phillips 66?

SecurityWeek lists earlier positions at Excelerate Energy, ExxonMobil and Honeywell. She also serves on the board of ONE-ISAC, the oil and natural gas sector's information sharing and analysis center.

See more security chiefs in energy and utilities and others who rose from deputy to chief.