Sr Dir - Cybersecurity

Oshkosh Corporation•Oshkosh, WI

1d•$186,200 - $353,800

About The Position

At Oshkosh, we build, serve and protect people and communities around the world by designing and manufacturing some of the toughest specialty trucks and access equipment. We employ over 18,000 team members all united by a common purpose. Our engineering and product innovation help keep soldiers and firefighters safe, is critical in building and keeping communities clean and helps people do their jobs every day. JOB SUMMARY Oshkosh Corporation owns significant and growing assets in the form of information across its global operations, connected products, and manufacturing environments. The unauthorized disclosure or compromise of these assets could result in material harm to the organization, its customers, and its shareholders. The Senior Director, Cybersecurity is a critical executive leadership role responsible for owning and advancing Oshkosh's enterprise cybersecurity strategy. Reporting directly to the Chief Information Security Officer (CISO), this role serves as a key deputy and strategic partner, leading multiple cybersecurity domains while driving enterprise-wide security transformation, and representing the cybersecurity program to executive leadership, the Board of Directors, customers, and regulators.

Requirements

Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.
12 or more years of progressive Information Security/Cybersecurity experience.
7 or more years of cybersecurity leadership experience managing programs, teams, and strategic initiatives.
Demonstrated experience presenting cybersecurity strategy, risk, and program maturity to senior executive leadership.
Ability to travel up to 15% of time, including international travel.

Nice To Haves

Graduate degree in Information Systems, Cybersecurity, Business Administration, or equivalent.
CISSP strongly preferred; CISM, CRISC, CCSP, GIAC, or equivalent certifications preferred.
Experience in defense, government contracting, manufacturing, or other regulated industries with CMMC, ITAR, or similar requirements.
Active U.S. Government Secret level clearance (or ability to obtain).
Strong knowledge of cybersecurity operations, incident response, vulnerability management, cloud security, identity, OT/ICS security, security architecture, and enterprise risk management.
Demonstrated ability to build and sustain relationships with C-suite executives, board members, regulators, and key external partners.
Proficiency in cybersecurity risk quantification, business impact analysis, and communicating risk in financial terms to non-technical audiences.
Experience managing multi-million-dollar cybersecurity budgets, vendor negotiations, and technology investment planning.

Responsibilities

Own and drive Oshkosh's enterprise cybersecurity strategy, establishing a 3-5 year roadmap that aligns security investments and priorities with enterprise risk, business objectives, and the evolving threat landscape.
Serve as the CISO's primary deputy, supporting and representing the cybersecurity program in executive, regulatory, audit committee, customer, and operational engagements.
Partner with the CISO, CIO, and senior business leaders to integrate cybersecurity strategy with corporate digital transformation initiatives, M&A activity, and global expansion priorities.
Own the enterprise cybersecurity operating model, governance processes, performance management framework, and cross-functional decision forums to ensure consistent execution of enterprise priorities.
Manage cybersecurity budgets, forecasts, vendor relationships, and strategic technology investment planning to optimize value and reduce enterprise risk.
Prioritize enterprise cybersecurity investments and balance resources across cybersecurity portfolios to maximize risk reduction and business value.
Provide enterprise leadership across Architecture, Engineering, and Cyber Defense through subordinate directors, ensuring integrated planning, investment prioritization, and consistent execution across all cybersecurity functions.
Drive modernization of security capabilities across cloud, identity, endpoint, network, infrastructure, OT, and manufacturing environments, with measurable improvement in the enterprise risk posture.
Ensure subordinate leaders maintain effective operational capabilities across security operations, incident response, vulnerability management, and cyber defense.
Lead cyber investigations, crisis response, and incident recovery efforts, providing decisive direction and timely communication to executive leadership and the Board.
Own enterprise cybersecurity performance reporting, including KPIs, KRIs, maturity assessments, executive dashboards, and Board materials prepared for the CISO.
Direct security audits, risk assessments, regulatory compliance activities, and contractual security requirement analyses across all business units and geographies.
Oversee third-party and supply chain cybersecurity risk programs, ensuring that partners, managed service providers, and strategic vendors meet Oshkosh security standards.
Lead cybersecurity alignment with applicable frameworks and regulatory expectations, including NIST CSF, CMMC, and applicable defense/government contracting requirements.
Drive enterprise security transformation by championing a security-first culture, advocating for risk-informed decision-making, and partnering with IT, Legal, HR, Engineering, Finance, and Compliance leaders.
Lead cybersecurity integration for new business activities, acquisitions, divestitures, and new product development, proactively identifying and mitigating emerging risks before they materialize.
Influence executive and business leadership to adopt security-enabling strategies, translating complex risk tradeoffs into clear business language and actionable recommendations.
Identify opportunities to reduce risk, improve efficiency, optimize costs, and increase business value through security program innovation.
Lead, mentor, and develop a high-performing team of cybersecurity managers and senior professionals, building organizational depth, succession readiness, and a culture of accountability and continuous improvement.
Set team vision and direction, define performance expectations, and champion talent development programs that attract and retain top cybersecurity talent across multiple specialized domains.
Serve as acting CISO when delegated, representing the cybersecurity organization with executive leadership, customers, regulators, and external stakeholders.