Director, Enterprise Cybersecurity

Location: 15000 Valmont Plaza, Omaha, Nebraska 68154

About the role

The Director, Enterprise Cybersecurity leads and advances Valmont's global cybersecurity program to protect enterprise information assets, technology platforms, cloud environments, digital solutions, and operational technology systems. Reporting to the Vice President, Cybersecurity & Technology Operations, this role serves as both a strategic cybersecurity leader and a hands‑on technical executive, translating enterprise security strategy into operational execution and measurable business outcomes.

Responsibilities

• Lead execution of Valmont's enterprise cybersecurity strategy, roadmap, and annual priorities.
• Establish and maintain cybersecurity policies, standards, procedures, and operational practices aligned with business and risk management objectives.
• Develop and mature cybersecurity capabilities that support secure business growth, digital transformation, cloud adoption, and operational resilience.
• Promote cybersecurity awareness, accountability, and risk ownership throughout the organization.
• Partner with business and technology leaders to support secure adoption of emerging technologies, AI capabilities, and digital solutions.
• Develop and report cybersecurity KPIs, risk indicators, maturity metrics, and program performance updates to executive leadership.
• Serve as a trusted advisor to leaders regarding cybersecurity risks, emerging threats, and mitigation strategies.
• Drive innovation through automation, orchestration, AI‑enabled security operations, and workflow simplification initiatives.
• Oversee enterprise security operations, threat monitoring, vulnerability management, threat intelligence, penetration testing, and incident response programs.
• Establish and continuously enhance cybersecurity detection, monitoring, and response capabilities.
• Lead investigation, containment, remediation, and recovery efforts for cyber incidents and significant security events.
• Coordinate cyber incident communications, escalation processes, and regulatory reporting obligations when required.
• Develop operational resilience metrics and improve detection and response capabilities through analytics, automation, and emerging technologies.
• Coordinate cybersecurity exercises, incident simulations, and readiness testing to validate response capabilities and resilience plans.
• Support business continuity and recovery planning for critical systems and technology services.
• Provide leadership for security engineering functions supporting endpoint, network, cloud, application, data protection, and privileged access management.
• Partner with infrastructure, architecture, engineering, and application teams to define and implement secure enterprise architectures.
• Ensure security requirements are embedded into infrastructure, cloud, network, and application design decisions through secure‑by‑design principles.
• Lead development and implementation of enterprise security architecture standards.
• Provide hands‑on technical leadership during implementation of cybersecurity technologies and infrastructure modernization initiatives.
• Support implementation of Zero Trust capabilities, network segmentation, encryption standards, identity governance controls, and cloud‑native security capabilities.
• Evaluate and implement emerging cybersecurity technologies that improve security effectiveness, resilience, and operational efficiency.
• Oversee identity and access management processes including authentication, access governance, privileged access management, identity lifecycle management, and identity security controls.
• Ensure appropriate segregation of duties and access controls across enterprise systems and business applications.
• Drive continuous improvement of identity governance processes, technologies, and controls.
• Lead enterprise and application security programs, including SAP security governance, Segregation of Duties (SoD), security assessments, and security reviews.
• Integrate cybersecurity requirements into technology projects, software development processes, and system implementations.
• Promote secure development lifecycle practices and support adoption of security‑by‑design principles.
• Partner with business and technology teams to incorporate privacy and data protection requirements into new solutions and services.
• Partner with manufacturing, engineering, infrastructure, and operational technology teams to strengthen cybersecurity capabilities across industrial environments.
• Support implementation of security controls that improve manufacturing resilience, operational continuity, and cyber risk mitigation.
• Align OT security practices with enterprise cybersecurity standards and governance requirements.
• Develop and promote security awareness programs that strengthen understanding of cyber risk and responsible security practices.
• Foster a culture of accountability, continuous improvement, and cybersecurity ownership across the organization.
• Provide training and guidance that improves cybersecurity awareness and