Director of Cybersecurity Strategy & Risk

Socket.dev; Dubuque (IA); On-site; USD 140,000 - 190,000; Full time

Job summary

Flexsteel is seeking a Director of Cyber Security to partner with IT, executive leadership, legal, and external security partners. You will drive the cybersecurity strategy, governance, and incident response, ensuring readiness across the organization.

You will lead security operations, risk management, vendor oversight, and program governance, while communicating complex risks to executives and non-technical stakeholders. This role is central to resilience and business continuity.

Qualifications

• Bachelor's degree or equivalent experience in IT, cybersecurity, or related field.
• 8+ years in cybersecurity/IT leadership roles.
• 3+ years leading cybersecurity programs and teams.
• Strong knowledge of NIST and CIS Controls.
• Experience with SAP, M365, cloud/SaaS, data platforms, and manufacturing environments.
• Ability to communicate risks to executives and non-technical audiences.

Responsibilities

• Develop and maintain cybersecurity strategy, roadmap, policies, and procedures.
• Lead governance, risk reviews, metrics, and maturity assessments.
• Oversee security operations: threat monitoring, endpoint, email, identity security.
• Lead vulnerability remediation planning with IT and business owners.
• Develop incident response plan and post-incident improvements.
• Oversee cyber risk into vendor and third-party security requirements.

Skills

Leadership

Project management

Vendor management

Collaboration

Analytical skills

Problem-solving

Executive communication

Education

Bachelor's degree in IT/Cybersecurity/CS/Business

Tools

SAP

Microsoft 365

Cloud platforms

Job description

Flexsteel is seeking a Director of Cyber Security to partner with IT, executive leadership, legal, and external security partners. You will drive the cybersecurity strategy, governance, and incident response, ensuring readiness across the organization.

You will lead security operations, risk management, vendor oversight, and program governance, while communicating complex risks to executives and non-technical stakeholders. This role is central to resilience and business continuity.