Cyber Security Director

Flexsteel Industries, Inc.; Dubuque (IA); On-site; USD 140,000 - 190,000; Full time

Job summary

Flexsteel Industries, Inc. is seeking a Director of Cyber Security to partner with IT, executive leadership, legal, compliance, and operations to reduce cyber risk and strengthen resilience.

You will spearhead the cybersecurity strategy, governance, and security operations across enterprise applications, cloud, and manufacturing environments. The role requires strategic leadership, cross-functional collaboration, and the ability to communicate risk and priorities to both technical and

Qualifications

• Bachelor’s degree or equivalent in IT, cybersecurity, CS, or business.
• 8+ years in cybersecurity, IT risk, or security leadership roles.
• 3+ years leading cybersecurity programs, vendors, or major initiatives.

Responsibilities

• Develop and maintain enterprise cybersecurity strategy, roadmap, policies, and procedures.
• Lead governance, risk reviews, executive reporting, and maturity assessments.
• Identify and communicate cybersecurity risks across applications, cloud, infrastructure, and third parties.
• Oversee security operations including threat monitoring, identity protection, vulnerability management, and cloud security.
• Lead vulnerability remediation planning with stakeholders across IT and business units.
• Develop and test the Cybersecurity Incident Response Plan and post-incident actions.
• Strengthen cyber recovery readiness with backup, DR alignment, and access controls.
• Manage identity and access management strategies including MFA and access reviews.
• Oversee data protection, encryption, DLP, retention, and analytics data security.

Skills

Leadership

Strategic thinking

Communication

Vendor management

Project management

Analytical

Collaboration

Education

Bachelor's degree in IT/Cybersecurity/CS/Business

Tools

SAP

Microsoft 365

Cloud platforms

Job description

This role partners closely with IT, executive leadership, legal, compliance, operations, and external security partners to reduce cyber risk, strengthen business resilience, and ensure the organization is prepared to prevent, detect, respond to, and recover from cybersecurity threats.

What You'll Do

• Develop and maintain Flexsteel's enterprise cybersecurity strategy, roadmap, policies, standards, and procedures aligned with business objectives, cyber insurance expectations, and recognized frameworks such as NIST and CIS Controls.
• Lead cybersecurity governance, including risk reviews, executive reporting, metrics, maturity assessments, and continuous improvement plans.
• Identify, assess, prioritize, and communicate cybersecurity risks across enterprise applications, cloud platforms, infrastructure, manufacturing environments, third parties, and business processes.
• Oversee security operations, including threat monitoring, endpoint protection, email security, identity security, vulnerability management, cloud security, and managed detection and response services.
• Lead vulnerability remediation planning in partnership with infrastructure, applications, data, and business system owners.
• Develop, maintain, and test the Cybersecurity Incident Response Plan, including escalation procedures, communication plans, forensic coordination, ransomware response, and post-incident improvement actions.
• Strengthen cyber recovery readiness through backup integrity, recovery testing, privileged access controls, disaster recovery alignment, and business continuity coordination.
• Lead identity and access management strategy, including multifactor authentication, conditional access, privileged access, user lifecycle processes, and periodic access reviews.
• Oversee data protection practices, including data classification, secure file sharing, encryption, data loss prevention, retention, monitoring, and controls for sensitive information used in analytics and AI tools.
• Assess vendor and third-party cybersecurity posture, data protection practices, recovery capabilities, and contractual security requirements.
• Consult with IT and business teams to ensure security requirements are incorporated into technology evaluation, design, selection, implementation, and ongoing operations.
• Manage cybersecurity vendors, consultants, auditors, managed security service providers, cyber insurance partners, and incident response firms.
• Develop cybersecurity awareness programs, phishing simulations, executive education, and targeted training for high-risk user groups.
• Prepare and manage cybersecurity budgets, resource plans, business cases, and investment recommendations.
• Serve as an active member of the IT leadership team and communicate cybersecurity risks, priorities, and recommendations clearly to both technical and non-technical audiences.

What We're Looking For

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field; equivalent experience may be considered.
• Eight or more years of experience in cybersecurity, IT risk, infrastructure, security operations, or related technology leadership roles.
• Three or more years of experience leading cybersecurity programs, teams, vendors, or major security initiatives.
• Strong knowledge of cybersecurity frameworks and practices, including NIST and CIS Controls.
• Experience with enterprise systems such as SAP, Microsoft 365, cloud platforms, SaaS applications, data platforms, network infrastructure, and manufacturing or distribution technology environments.
• Ability to communicate cybersecurity risks, business impacts, priorities, and recommendations to executives, business leaders, technical teams, and external partners.
• Strong leadership, project management, vendor management, collaboration, analytical, and problem-solving skills.

Why Join Flexsteel

This is an opportunity to lead a business-critical cybersecurity function for an established, publicly traded company with a strong operational footprint and a continued focus on technology, resilience, and business transformation. The Director of Cyber Security will have meaningful visibility, executive partnership, and the ability to shape the company's cybersecurity roadmap.

Flexsteel offers a competitive compensation and benefits package, including health, dental, vision, retirement benefits, paid time off, and additional company-sponsored benefits.

This role is primarily performed in a climate-controlled office environment. The position may occasionally enter operational areas where exposure to heat, humidity, fluctuating temperatures, dust, odors, oil, fumes, noise, powered industrial trucks, equipment, and moving mechanical parts may occur. Personal protective equipment may be required in designated areas.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.