Sr Dir - Cybersecurity

Oshkosh•Oshkosh, WI

About The Position

Oshkosh Corporation owns significant and growing assets in the form of information across its global operations, connected products, and manufacturing environments. The unauthorized disclosure or compromise of these assets could result in material harm to the organization, its customers, and its shareholders. The Senior Director, Cybersecurity is a critical leadership role responsible for operationalizing and advancing the enterprise cybersecurity strategy established by the Chief Information Security Officer (CISO). Reporting directly to the CISO, this role serves as the CISO's primary operational deputy, leading cross-domain execution across multiple cybersecurity domains while driving enterprise-wide security transformation, and supporting executive leadership, Board of Directors, customer, and regulator engagement as delegated by the CISO. This is a high-impact opportunity to help protect the technologies and people behind Oshkosh Corporation's mission — delivering innovative, purpose-built vehicles and equipment that empower everyday heroes around the world. From soldiers and firefighters to refuse collectors and construction workers, the work Oshkosh does matters. As Senior Director, Cybersecurity, you will translate enterprise-wide cybersecurity strategy into an integrated operating plan spanning multiple domains while advancing a modern and comprehensive information security program across Oshkosh’s global footprint. You will serve as the CISO's primary operational deputy and a key member of the Cybersecurity leadership team, with broad accountability for protecting Oshkosh's digital environment. This role demands a leader who can operate at both the strategic and executive levels, translating enterprise risk into clear business decisions, and building a world-class cybersecurity organization capable of supporting Oshkosh's continued growth and innovation.

Requirements

Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.
12 or more years of progressive Information Security/Cybersecurity experience.
7 or more years of cybersecurity leadership experience managing programs, teams, and strategic initiatives.
Demonstrated experience presenting cybersecurity strategy, risk, and program maturity to senior executive leadership.
Ability to travel up to 15% of time, including international travel.

Nice To Haves

Graduate degree in Information Systems, Cybersecurity, Business Administration, or equivalent.
CISSP strongly preferred; CISM, CRISC, CCSP, GIAC, or equivalent certifications preferred.
Experience in defense, government contracting, manufacturing, or other regulated industries with CMMC, ITAR, or similar requirements.
Active U.S. Government Secret level clearance (or ability to obtain).
Strong knowledge of cybersecurity operations, incident response, vulnerability management, cloud security, identity, OT/ICS security, security architecture, and enterprise risk management.
Demonstrated ability to build and sustain relationships with C-suite executives, board members, regulators, and key external partners.
Proficiency in cybersecurity risk quantification, business impact analysis, and communicating risk in financial terms to non-technical audiences.
Experience managing multi-million dollar cybersecurity budgets, vendor negotiations, and technology investment planning.

Responsibilities

Lead cross-domain execution of the enterprise cybersecurity strategy established by the CISO, translating it into a 3-5 year operating roadmap that aligns security investments and priorities with enterprise risk, business objectives, and the evolving threat landscape.
Serve as the CISO's primary operational deputy, supporting executive, regulatory, audit committee, customer, and operational engagements as delegated by the CISO.
Partner with the CISO, CIO, and senior business leaders to integrate cybersecurity strategy with corporate digital transformation initiatives, M&A activity, and global expansion priorities.
Define and oversee cybersecurity governance structures, policies, standards, and control frameworks that enable business growth while maintaining enterprise resilience.
Manage cybersecurity budgets, forecasts, vendor relationships, and strategic technology investment planning to optimize value and reduce enterprise risk.
Coordinate three core cybersecurity domains through subordinate leaders: (1) Cybersecurity Architecture — accountable for enterprise security architecture, secure-by-design principles, and OT/ICS security; (2) Cybersecurity Engineering — responsible for the build, deployment, and operation of security controls and tools across all environments; and (3) Cyber Defense — encompassing threat intelligence, security monitoring, incident response, and forensic investigation across Oshkosh’s global operations.
Drive modernization of security capabilities across cloud, identity, endpoint, network, infrastructure, OT, and manufacturing environments, with measurable improvement in the enterprise risk posture.
Oversee security monitoring, threat detection, incident response, vulnerability management, and threat intelligence programs, ensuring rapid response and clear executive communication during significant security events.
Lead cyber investigations, crisis response, and incident recovery efforts, providing decisive direction and timely communication to executive leadership, and supporting Board-level communication as delegated by the CISO.
Establish cybersecurity KPIs, KRIs, dashboards, and reporting for executive leadership and the Audit Committee of the Board of Directors, demonstrating program maturity and risk posture over time.
Direct security audits, risk assessments, regulatory compliance activities, and contractual security requirement analyses across all business units and geographies.
Oversee third-party and supply chain cybersecurity risk programs, ensuring that partners, managed service providers, and strategic vendors meet Oshkosh security standards.
Lead cybersecurity alignment with applicable frameworks and regulatory expectations, including NIST CSF, CMMC, and applicable defense/government contracting requirements.
Drive enterprise security transformation by championing a security-first culture, advocating for risk-informed decision-making, and partnering with IT, Legal, HR, Engineering, Finance, and Compliance leaders.
Lead cybersecurity integration for new business activities, acquisitions, divestitures, and new product development, proactively identifying and mitigating emerging risks before they materialize.
Influence executive and business leadership to adopt security-enabling strategies, translating complex risk tradeoffs into clear business language and actionable recommendations.
Identify opportunities to reduce risk, improve efficiency, optimize costs, and increase business value through security program innovation.
Lead, mentor, and develop a high-performing team of cybersecurity managers and senior professionals, building organizational depth, succession readiness, and a culture of accountability and continuous improvement.
Set team vision and direction, define performance expectations, and champion talent development programs that attract and retain top cybersecurity talent across multiple specialized domains.