Cyber Security Director

Flexsteel Industries Inc.; Dubuque (IA); On-site; USD 140,000 - 200,000; Full time

Job summary

Flexsteel Industries Inc. seeks a Director of Cyber Security to lead the companys enterprise security strategy, governance, and risk management. You will align with business objectives and recognized frameworks while guiding security operations and incident response.

You will partner with IT leadership, executive teams, legal/compliance, and external security partners to strengthen resilience, protect data, and manage third-party risk across manufacturing and distribution environments.

Qualifications

• Bachelor's degree or higher in IT, cybersecurity, or related field.
• Eight+ years in cybersecurity or IT risk leadership.
• Three+ years leading cybersecurity programs and teams.
• Knowledge of NIST and CIS Controls.
• Experience with SAP, Microsoft 365, cloud/SaaS environments.
• Ability to communicate risks to executives.

Responsibilities

• Develop and maintain enterprise cybersecurity strategy, roadmap, policies, standards, and procedures aligned with objectives and recognized frameworks.
• Lead cybersecurity governance, including risk reviews, executive reporting, metrics, and maturity assessments.
• Identify, assess, prioritize, and communicate cybersecurity risks across enterprise systems and processes.
• Oversee security operations: threat monitoring, identity and data protection, vulnerability mgmt, cloud security, and MDR services.
• Lead vulnerability remediation planning with owners across infra, apps, and data.
• Develop, test, and exercise the Cybersecurity Incident Response Plan.
• Strengthen cyber recovery readiness: backups, DR alignment, and business continuity.

Skills

Leadership

Communication

Vendor management

Project management

Collaboration

Analytical thinking

Problem solving

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or related field

Tools

SAP

Microsoft 365

Cloud platforms

SaaS apps

Data platforms

Network infra

Manufacturing tech

Job description

This role partners closely with IT, executive leadership, legal, compliance, operations, and external security partners to reduce cyber risk, strengthen business resilience, and ensure the organization is prepared to prevent, detect, respond to, and recover from cybersecurity threats.

What You’ll Do

• Develop and maintain Flexsteel's enterprise cybersecurity strategy, roadmap, policies, standards, and procedures aligned with business objectives, cyber insurance expectations, and recognized frameworks such as NIST and CIS Controls.
• Lead cybersecurity governance, including risk reviews, executive reporting, metrics, maturity assessments, and continuous improvement plans.
• Identify, assess, prioritize, and communicate cybersecurity risks across enterprise applications, cloud platforms, infrastructure, manufacturing environments, third parties, and business processes.
• Oversee security operations, including threat monitoring, endpoint protection, email security, identity security, vulnerability management, cloud security, and managed detection and response services.
• Lead vulnerability remediation planning in partnership with infrastructure, applications, data, and business system owners.
• Develop, maintain, and test the Cybersecurity Incident Response Plan, including escalation procedures, communication plans, forensic coordination, ransomware response, and post-incident improvement actions.
• Strengthen cyber recovery readiness through backup integrity, recovery testing, privileged access controls, disaster recovery alignment, and business continuity coordination.
• Lead identity and access management strategy, including multifactor authentication, conditional access, privileged access, user lifecycle processes, and periodic access reviews.
• Oversee data protection practices, including data classification, secure file sharing, encryption, data loss prevention, retention, monitoring, and controls for sensitive information used in analytics and AI tools.
• Assess vendor and third-party cybersecurity posture, data protection practices, recovery capabilities, and contractual security requirements.
• Consult with IT and business teams to ensure security requirements are incorporated into technology evaluation, design, selection, implementation, and ongoing operations.
• Manage cybersecurity vendors, consultants, auditors, managed security service providers, cyber insurance partners, and incident response firms.
• Develop cybersecurity awareness programs, phishing simulations, executive education, and targeted training for high-risk user groups.
• Prepare and manage cybersecurity budgets, resource plans, business cases, and investment recommendations.
• Serve as an active member of the IT leadership team and communicate cybersecurity risks, priorities, and recommendations clearly to both technical and non-technical audiences.

What We’re Looking For

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field; equivalent experience may be considered.
• Eight or more years of experience in cybersecurity, IT risk, infrastructure, security operations, or related technology leadership roles.
• Three or more years of experience leading cybersecurity programs, teams, vendors, or major security initiatives.
• Strong knowledge of cybersecurity frameworks and practices, including NIST and CIS Controls.
• Experience with enterprise systems such as SAP, Microsoft 365, cloud platforms, SaaS applications, data platforms, network infrastructure, and manufacturing or distribution technology environments.
• Ability to communicate cybersecurity risks, business impacts, priorities, and recommendations to executives, business leaders, technical teams, and external partners.
• Strong leadership, project management, vendor management, collaboration, analytical, and problem-solving skills.

Why Join Flexsteel

This is an opportunity to lead a business-critical cybersecurity function for an established, publicly traded company with a strong operational footprint and a continued focus on technology, resilience, and business transformation. The Director of Cyber Security will have meaningful visibility, executive partnership, and the ability to shape the company’s cybersecurity roadmap.

Flexsteel offers a competitive compensation and benefits package, including health, dental, vision, retirement benefits, paid time off, and additional company-sponsored benefits.

Work Environment

This role is primarily performed in a climate-controlled office environment. The position may occasionally enter operational areas where exposure to heat, humidity, fluctuating temperatures, dust, odors, oil, fumes, noise, powered industrial trucks, equipment, and moving mechanical parts may occur. Personal protective equipment may be required in designated areas.