15000 Valmont Plaza Omaha Nebraska 68154
A Brief Summary of This Position:The Director, Enterprise Cybersecurity is responsible for leading and advancing Valmont's global cybersecurity program to protect enterprise information assets, technology platforms, cloud environments, digital solutions, and operational technology systems. Reporting to the Vice President, Cybersecurity & Technology Operations, this role serves as both a strategic cybersecurity leader and a hands-on technical executive, translating enterprise security strategy into operational execution and measurable business outcomes.
The Director provides leadership across security operations, security engineering and architecture, identity and access management, application security, vulnerability management and cyber incident response. The role partners closely with infrastructure, engineering, digital technology, legal, internal audit, and business leaders to ensure security is integrated into enterprise architecture, technology modernization initiatives, and business operations.
This position requires a leader who can effectively balance strategic planning with technical execution, influence executive stakeholders.
Essential Functions:Cybersecurity Program Leadership- Lead execution of Valmont's enterprise cybersecurity strategy, roadmap, and annual priorities.
- Establish and maintain cybersecurity policies, standards, procedures, and operational practices aligned with business and risk management objectives.
- Develop and mature cybersecurity capabilities that support secure business growth, digital transformation, cloud adoption, and operational resilience.
- Promote cybersecurity awareness, accountability, and risk ownership throughout the organization.
- Partner with business and technology leaders to support secure adoption of emerging technologies, AI capabilities, and digital solutions.
- Develop and report cybersecurity KPIs, risk indicators, maturity metrics, and program performance updates to executive leadership.
- Serve as a trusted advisor to leaders regarding cybersecurity risks, emerging threats, and mitigation strategies.
- Drive innovation through automation, orchestration, AI-enabled security operations, and workflow simplification initiatives.
Security Operations & Incident Response- Oversee enterprise security operations, threat monitoring, vulnerability management, threat intelligence, penetration testing, and incident response programs.
- Establish and continuously enhance cybersecurity detection, monitoring, and response capabilities.
- Lead investigation, containment, remediation, and recovery efforts for cyber incidents and significant security events.
- Coordinate cyber incident communications, escalation processes, and regulatory reporting obligations when required.
- Develop operational resilience metrics and continuously improve detection and response capabilities through analytics, automation, and emerging technologies.
- Coordinate cybersecurity exercises, incident simulations, and readiness testing to validate response capabilities and resilience plans.
- Support business continuity and recovery planning for critical systems and technology services.
Security Engineering & Architecture- Provide leadership for security engineering functions supporting endpoint security, network security, cloud security, application security, data protection, and privileged access management.
- Partner with infrastructure, architecture, engineering, and application teams to define and implement secure enterprise architectures.
- Ensure security requirements are embedded into infrastructure, cloud, network, and application design decisions through secure-by-design principles.
- Lead development and implementation of enterprise security architecture standards.
- Provide hands-on technical leadership during implementation of cybersecurity technologies and infrastructure modernization initiatives.
- Support implementation of Zero Trust capabilities, network segmentation strategies, encryption standards, identity governance controls, and cloud-native security capabilities.
- Evaluate and implement emerging cybersecurity technologies that improve security effectiveness, resilience, and operational efficiency.
Identity & Access Management- Oversee identity and access management processes including authentication, access governance, privileged access management, identity lifecycle management, and identity security controls.
- Ensure appropriate segregation of duties and access controls across enterprise systems and business applications.
- Drive continuous improvement of identity governance processes, technologies, and controls.
Enterprise & Application Security- Lead enterprise and application security programs, including SAP security governance, Segregation of Duties (SoD), security assessments, and security reviews.
- Ensure cybersecurity requirements are integrated into technology projects, software development processes, and system implementations.
- Promote secure development lifecycle practices and support adoption of security-by-design principles.
- Partner with business and technology teams to incorporate privacy and data protection requirements into new solutions and services
Operational Technology Security- Partner with manufacturing, engineering, infrastructure, and operational technology teams to strengthen cybersecurity capabilities across industrial environments.
- Support implementation of security controls that improve manufacturing resilience, operational continuity, and cyber risk mitigation.
- Align OT security practices with enterprise cybersecurity standards and governance requirements.
Security Awareness & Organizational Enablement- Serve as an enterprise advocate for cybersecurity, privacy, and data protection.
- Develop and promote security awareness programs that strengthen understanding of cyber risk and responsible security practices.
- Foster a culture of accountability, continuous improvement, and cybersecurity ownership across the organization.
- Provide training and guidance that improves cybersecurity awareness and preparedness throughout the enterprise.
Leadership & Team Development- Lead, develop, mentor, and build a high-performing global cybersecurity organization.
- Establish performance expectations, development plans, and succession strategies for key cybersecurity roles.
- Foster collaboration and accountability across geographically dispersed teams and business functions.
- Build organizational capabilities that support current and future cybersecurity needs.
Operational & Financial Management- Manage cybersecurity budgets, vendor relationships, technology investments, and external service providers.
- Support prioritization of cybersecurity initiatives and resource allocation decisions based on enterprise risk and business priorities.
- Monitor cybersecurity performance metrics, operational effectiveness, and program maturity.
- Establish and maintain strategic relationships with cybersecurity vendors, technology partners, and external service providers.
Required Qualifications of Every Candidate (Education, Experience, Knowledge, Skills and Abilities):- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.
- 10+ years of progressive experience in information technology, cybersecurity, and technology risk management.
- Minimum 5 years of leadership experience managing cybersecurity programs and teams.
- Demonstrated experience leading enterprise cybersecurity operations across multiple security disciplines.
- Deep expertise in cloud security, security architecture, infrastructure security, identity and access management, and cyber incident response.
- Experience implementing and operationalizing cybersecurity controls aligned with recognized security frameworks.
- Demonstrated ability to balance strategic leadership responsibilities with hands-on technical execution.
- Strong communication and stakeholder management skills with the ability to translate complex technical concepts into business-focused recommendations.
- Experience supporting enterprise cloud environments, digital transformation initiatives, and infrastructure modernization efforts.
- Ability to travel up to 25%.
Highly Qualified Candidates Will Also Possess These Qualifications:- Master's degree in Cybersecurity, Information Systems, Engineering, Computer Science, or MBA.
- Professional certifications such as CISSP, CISM, CRISC, CISA, CCSP, GIAC, Azure Security, or equivalent.
- Experience supporting manufacturing, industrial, and operational technology (OT) environments.
- Experience building, transforming, or maturing enterprise cybersecurity programs.
- Experience implementing Zero Trust architectures, cloud-native security solutions, security automation, and AI-enabled security operations.
- Experience working within publicly traded, regulated, or global organizations.
- Experience leading geographically distributed cybersecurity teams.
BenefitsValmont offers employees and their families a comprehensive Total Wellbeing benefit package to ensure their individual and family's overall wellness needs are met. Some offerings are dependent upon the role, work schedule, or location and can include the following:
- Healthcare (medical, prescription drugs, dental and vision)
- 401k retirement plan with company match
- Paid time off
- Employer paid life insurance
- Employer paid short-term and long-term disability including maternity leave
- Work Life Support
- Tuition Reimbursement up to $5,250 per year
- Voluntary programs like tobacco cessation, Type 2 diabetes reversal, one-on-one health coaching, mortgage services and more
