Sr Dir - Cybersecurity

At Oshkosh, we build, serve and protect people and communities around the world by designing and manufacturing some of the toughest specialty trucks and access equipment. We employ over 18,000 team members all united by a common purpose. Our engineering and product innovation help keep soldiers and firefighters safe, is critical in building and keeping communities clean and helps people do their jobs every day.

Oshkosh Corporation owns significant and growing assets in the form of information across its global operations, connected products, and manufacturing environments. The unauthorized disclosure or compromise of these assets could result in material harm to the organization, its customers, and its shareholders. The Senior Director, Cybersecurity is a critical leadership role responsible for operationalizing and advancing the enterprise cybersecurity strategy established by the Chief Information Security Officer (CISO). Reporting directly to the CISO, this role serves as the CISO's primary operational deputy, leading cross-domain execution across multiple cybersecurity domains while driving enterprise-wide security transformation, and supporting executive leadership, Board of Directors, customer, and regulator engagement as delegated by the CISO.

This is a high-impact opportunity to help protect the technologies and people behind Oshkosh Corporation's mission — delivering innovative, purpose-built vehicles and equipment that empower everyday heroes around the world. From soldiers and firefighters to refuse collectors and construction workers, the work Oshkosh does matters. As Senior Director, Cybersecurity, you will translate enterprise-wide cybersecurity strategy into an integrated operating plan spanning multiple domains while advancing a modern and comprehensive information security program across Oshkosh’s global footprint.

You will serve as the CISO's primary operational deputy and a key member of the Cybersecurity leadership team, with broad accountability for protecting Oshkosh's digital environment. This role demands a leader who can operate at both the strategic and executive levels, translating enterprise risk into clear business decisions, and building a world-class cybersecurity organization capable of supporting Oshkosh's continued growth and innovation.

These duties are not meant to be all-inclusive and other duties may be assigned.

Strategy & Program Leadership

• Lead cross-domain execution of the enterprise cybersecurity strategy established by the CISO, translating it into a 3-5 year operating roadmap that aligns security investments and priorities with enterprise risk, business objectives, and the evolving threat landscape.

• Serve as the CISO's primary operational deputy, supporting executive, regulatory, audit committee, customer, and operational engagements as delegated by the CISO.

• Partner with the CISO, CIO, and senior business leaders to integrate cybersecurity strategy with corporate digital transformation initiatives, M&A activity, and global expansion priorities.

• Define and oversee cybersecurity governance structures, policies, standards, and control frameworks that enable business growth while maintaining enterprise resilience.

• Manage cybersecurity budgets, forecasts, vendor relationships, and strategic technology investment planning to optimize value and reduce enterprise risk.

Architecture, Engineering & Cyber Defense

• Coordinate three core cybersecurity domains through subordinate leaders: (1) Cybersecurity Architecture — accountable for enterprise security architecture, secure-by-design principles, and OT/ICS security; (2) Cybersecurity Engineering — responsible for the build, deployment, and operation of security controls and tools across all environments; and (3) Cyber Defense — encompassing threat intelligence, security monitoring, incident response, and forensic investigation across Oshkosh’s global operations.

• Drive modernization of security capabilities across cloud, identity, endpoint, network, infrastructure, OT, and manufacturing environments, with measurable improvement in the enterprise risk posture.

• Oversee security monitoring, threat detection, incident response, vulnerability management, and threat intelligence programs, ensuring rapid response and clear executive communication during significant security events.

• Lead cyber investigations, crisis response, and incident recovery efforts, providing decisive direction and timely communication to executive leadership, and supporting Board-level communication as delegated by the CISO.

Risk Management & Compliance