Cyber Security Director

Socket.dev; Dubuque (IA); On-site; USD 140,000 - 190,000; Full time

Job summary

Flexsteel is seeking a Director of Cyber Security to partner with IT, executive leadership, legal, and external security partners. You will drive the cybersecurity strategy, governance, and incident response, ensuring readiness across the organization.

You will lead security operations, risk management, vendor oversight, and program governance, while communicating complex risks to executives and non-technical stakeholders. This role is central to resilience and business continuity.

Qualifications

• Bachelor's degree or equivalent experience in IT, cybersecurity, or related field.
• 8+ years in cybersecurity/IT leadership roles.
• 3+ years leading cybersecurity programs and teams.
• Strong knowledge of NIST and CIS Controls.
• Experience with SAP, M365, cloud/SaaS, data platforms, and manufacturing environments.
• Ability to communicate risks to executives and non-technical audiences.

Responsibilities

• Develop and maintain cybersecurity strategy, roadmap, policies, and procedures.
• Lead governance, risk reviews, metrics, and maturity assessments.
• Oversee security operations: threat monitoring, endpoint, email, identity security.
• Lead vulnerability remediation planning with IT and business owners.
• Develop incident response plan and post-incident improvements.
• Oversee cyber risk into vendor and third-party security requirements.

Skills

Leadership

Project management

Vendor management

Collaboration

Analytical skills

Problem-solving

Executive communication

Education

Bachelor's degree in IT/Cybersecurity/CS/Business

Tools

SAP

Microsoft 365

Cloud platforms

Job description

This role partners closely with IT, executive leadership, legal, compliance, operations, and external security partners to reduce cyber risk, strengthen business resilience, and ensure the organization is prepared to prevent, detect, respond to, and recover from cybersecurity threats.

What You'll Do

• Develop and maintain Flexsteel's enterprise cybersecurity strategy, roadmap, policies, standards, and procedures aligned with business objectives, cyber insurance expectations, and recognized frameworks such as NIST and CIS Controls.
• Lead cybersecurity governance, including risk reviews, executive reporting, metrics, maturity assessments, and continuous improvement plans.
• Identify, assess, prioritize, and communicate cybersecurity risks across enterprise applications, cloud platforms, infrastructure, manufacturing environments, third parties, and business processes.
• Oversee security operations, including threat monitoring, endpoint protection, email security, identity security, vulnerability management, cloud security, and managed detection and response services.
• Lead vulnerability remediation planning in partnership with infrastructure, applications, data, and business system owners.
• Develop, maintain, and test the Cybersecurity Incident Response Plan, including escalation procedures, communication plans, forensic coordination, ransomware response, and post-incident improvement actions.
• Strengthen cyber recovery readiness through backup integrity, recovery testing, privileged access controls, disaster recovery alignment, and business continuity coordination.
• Lead identity and access management strategy, including multifactor authentication, conditional access, privileged access, user lifecycle processes, and periodic access reviews.
• Oversee data protection practices, including data classification, secure file sharing, encryption, data loss prevention, retention, monitoring, and controls for sensitive information used in analytics and AI tools.
• Assess vendor and third-party cybersecurity posture, data protection practices, recovery capabilities, and contractual security requirements.
• Consult with IT and business teams to ensure security requirements are incorporated into technology evaluation, design, selection, implementation, and ongoing operations.
• Manage cybersecurity vendors, consultants, auditors, managed security service providers, cyber insurance partners, and incident response firms.
• Develop cybersecurity awareness programs, phishing simulations, executive education, and targeted training for high-risk user groups.
• Prepare and manage cybersecurity budgets, resource plans, business cases, and investment recommendations.
• Serve as an active member of the IT leadership team and communicate cybersecurity risks, priorities, and recommendations clearly to both technical and non-technical audiences.

What We're Looking For

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field; equivalent experience may be considered.
• Eight or more years of experience in cybersecurity, IT risk, infrastructure, security operations, or related technology leadership roles.
• Three or more years of experience leading cybersecurity programs, teams, vendors, or major security initiatives.
• Strong knowledge of cybersecurity frameworks and practices, including NIST and CIS Controls.
• Experience with enterprise systems such as SAP, Microsoft 365, cloud platforms, SaaS applications, data platforms, network infrastructure, and manufacturing or distribution technology environments.
• Ability to communicate cybersecurity risks, business impacts, priorities, and recommendations to executives, business leaders, technical teams, and external partners.
• Strong leadership, project management, vendor management, collaboration, analytical, and problem-solving skills.

Why Join Flexsteel

This is an opportunity to lead a business-critical cybersecurity function for an established, publicly traded company with a strong operational footprint and a continued focus on technology, resilience, and business transformation. The Director of Cyber Security will have meaningful visibility, executive partnership, and the ability to shape the company's cybersecurity roadmap.

Flexsteel offers a competitive compensation and benefits package, including health, dental, vision, retirement benefits, paid time off, and additional company-sponsored benefits.

Work Environment

This role is primarily performed in a climate-controlled office environment. The position may occasionally enter operational areas where exposure to heat, humidity, fluctuating temperatures, dust, odors, oil, fumes, noise, powered industrial trucks, equipment, and moving mechanical parts may occur. Personal protective equipment may be required in designated areas.