Cyber Security Director

Flexsteel Industries Inc.•Dubuque, IA

1d•Onsite

About The Position

This role partners closely with IT, executive leadership, legal, compliance, operations, and external security partners to reduce cyber risk, strengthen business resilience, and ensure the organization is prepared to prevent, detect, respond to, and recover from cybersecurity threats.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field; equivalent experience may be considered.
Eight or more years of experience in cybersecurity, IT risk, infrastructure, security operations, or related technology leadership roles.
Three or more years of experience leading cybersecurity programs, teams, vendors, or major security initiatives.
Strong knowledge of cybersecurity frameworks and practices, including NIST and CIS Controls.
Experience with enterprise systems such as SAP, Microsoft 365, cloud platforms, SaaS applications, data platforms, network infrastructure, and manufacturing or distribution technology environments.
Ability to communicate cybersecurity risks, business impacts, priorities, and recommendations to executives, business leaders, technical teams, and external partners.
Strong leadership, project management, vendor management, collaboration, analytical, and problem-solving skills.

Responsibilities

Develop and maintain Flexsteel’s enterprise cybersecurity strategy, roadmap, policies, standards, and procedures aligned with business objectives, cyber insurance expectations, and recognized frameworks such as NIST and CIS Controls.
Lead cybersecurity governance, including risk reviews, executive reporting, metrics, maturity assessments, and continuous improvement plans.
Identify, assess, prioritize, and communicate cybersecurity risks across enterprise applications, cloud platforms, infrastructure, manufacturing environments, third parties, and business processes.
Oversee security operations, including threat monitoring, endpoint protection, email security, identity security, vulnerability management, cloud security, and managed detection and response services.
Lead vulnerability remediation planning in partnership with infrastructure, applications, data, and business system owners.
Develop, maintain, and test the Cybersecurity Incident Response Plan, including escalation procedures, communication plans, forensic coordination, ransomware response, and post-incident improvement actions.
Strengthen cyber recovery readiness through backup integrity, recovery testing, privileged access controls, disaster recovery alignment, and business continuity coordination.
Lead identity and access management strategy, including multifactor authentication, conditional access, privileged access, user lifecycle processes, and periodic access reviews.
Oversee data protection practices, including data classification, secure file sharing, encryption, data loss prevention, retention, monitoring, and controls for sensitive information used in analytics and AI tools.
Assess vendor and third-party cybersecurity posture, data protection practices, recovery capabilities, and contractual security requirements.
Consult with IT and business teams to ensure security requirements are incorporated into technology evaluation, design, selection, implementation, and ongoing operations.
Manage cybersecurity vendors, consultants, auditors, managed security service providers, cyber insurance partners, and incident response firms.
Develop cybersecurity awareness programs, phishing simulations, executive education, and targeted training for high-risk user groups.
Prepare and manage cybersecurity budgets, resource plans, business cases, and investment recommendations.
Serve as an active member of the IT leadership team and communicate cybersecurity risks, priorities, and recommendations clearly to both technical and non-technical audiences.