Director of IT Security

Green Plains Inc.•Omaha, NE

About The Position

The Director of IT Security is an executive-level leader responsible for the overall strategy, governance, and execution of the Green Plains cybersecurity program. This individual serves as the organization’s primary subject matter expert on information security risk, with enterprise-wide accountability for protecting systems, data, and operations. The Director defines the strategic direction for cybersecurity, establishes governance frameworks aligned to NIST, ISO 27001, and CISA, and ensures a defensible, measurable, and audit-ready posture. This role provides regular reporting to executive leadership and the Audit Committee, translating technical risk into business impact and decision-ready insights. The Director will also serve as a key enterprise leader in the responsible adoption of artificial intelligence. This role will guide how AI technologies are evaluated, implemented, governed, and scaled across Green Plains, ensuring they deliver business value while maintaining appropriate security, privacy, ethical, and compliance controls. Through education and leadership, this role enables a security-aware, risk-conscious, and AI-enabled culture across the organization.

Requirements

CISSP (or equivalent), CISM or CRISC
10+ years of progressive experience in IT, or cybersecurity, with demonstrated leadership of enterprise security programs in complex environments.
Experience leading enterprise cybersecurity or IT security functions
Strong executive communication and leadership presence
Deep knowledge of security frameworks and regulatory requirements
Experience in cloud, hybrid, and enterprise environments
Applicants must be authorized to work in the United States on a full-time basis and be able to maintain ongoing work authorization without employer sponsorship now or in the future.

Nice To Haves

CISA, CCSP
Experience in regulated or industrial environments preferred

Responsibilities

Define and execute enterprise cybersecurity strategy aligned to business priorities
Establish governance frameworks and policies aligned to NIST, ISO, and CISA
Advise executive leadership and the Audit Committee on cybersecurity risk
Own enterprise cyber risk framework including risk identification and acceptance
Build and lead a high-performing security function
Embed security into business processes and technology initiatives
Oversee security monitoring, detection, and incident response
Lead business continuity and disaster recovery planning
Govern identity and access management, data protection, and sensitive data controls and access reviews
Lead third-party risk management and compliance alignment
Drive enterprise AI adoption to deliver measurable business value
Establish AI governance, guardrails, and acceptable use standards
Enable leaders and employees through education and guidance on ethical AI use
Embed secure AI usage into workflows and decision-making
Foster a security-aware and AI-enabled culture
Communicate effectively across executive, business, and technical audiences
Maintain certifications and continuing education
Stay current with threats, AI risks, and regulations
Provide direct oversight and targeted hands-on engagement in security operations, incident response activities, and enterprise risk mitigation efforts. Lead with presence and accountability during high-impact events and escalations.