Job Description

Provides senior-level leadership for cybersecurity strategy, operations, programs, and team activities to protect the organization’s information assets, systems, and data from cyber threats. Oversees cybersecurity risk management, incident response, vulnerability management, security awareness, policy execution, security technology administration, and continuous improvement of the organization’s security posture. Partners with IT leadership, business leaders, vendors, and internal stakeholders to align cybersecurity priorities with enterprise objectives, strengthen controls, support privacy and compliance requirements, and enable secure business operations.

• Provide senior-level leadership, direction, coordination, and oversight for cybersecurity programs, tools, processes, and team activities across the organization.
• Lead the development and execution of cybersecurity plans, standards, procedures, and priorities to protect systems, data, networks, and business operations while aligning department objectives with organizational goals
• Oversee cybersecurity risk identification, assessment, and mitigation activities, including vulnerability management, security control reviews, remediation tracking, and escalation of material risks to appropriate leadership
• Direct cybersecurity incident response activities, including escalation, investigation coordination, containment, recovery support, executive communication, documentation, and lessons learned.
• Evaluate emerging threats, risks, vulnerabilities, regulatory expectations, and cybersecurity trends and sponsor practical improvements to reduce business risk and strengthen the organization’s security posture.
• Set direction for cybersecurity awareness, training, and communication activities to promote secure practices, improve risk awareness, and strengthen cybersecurity culture throughout the organization.
• Oversee cybersecurity projects, vendor activities, managed security service providers, and security tool investments to ensure work is delivered effectively, securely, and in alignment with business priorities and approved budgets.
• Build, coach, and develop a high-performing cybersecurity team by setting strategic and operational priorities, providing feedback, supporting professional development, and ensuring effective collaboration with IT and business partners.

• Minimum – Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field. Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security Plus, or equivalent are preferred
• 10 or more years of progressive experience in cybersecurity, information security, infrastructure security, risk management, or related IT disciplines. Prior people leadership, strategic program leadership, vendor management, incident response, vulnerability management, security operations, and cross-functional leadership experience preferred.
• Knowledge - Advanced knowledge of cybersecurity operations, security frameworks, enterprise risk management practices, incident response, vulnerability management, identity and access controls, data protection, privacy requirements, regulatory expectations, and security technologies used to protect enterprise systems and information.
• Skills - Skilled at setting cybersecurity direction, prioritizing enterprise risks, translating technical risk into business terms, and influencing IT, business, legal, audit, and vendor stakeholders. Strong interpersonal skills to include effective oral and written communication, relationship building, conflict management, and vendor negotiation. Skilled at coaching, developing, and motivating cybersecurity and technical talent.
• Abilities - Defines complex problems, gathers and analyzes security information, evaluates enterprise risk, and recommends practical solutions that balance protection, compliance, cost, operational impact, and business objectives. Builds trust, cooperation, and accountability among cybersecurity team members and cross-functional partners while maintaining appropriate urgency and confidentiality
• Supervisory Scope - Reports to Director level; direct reports = yes; indirect reports = yes
• Financial Scope - Responsible for managing assigned cybersecurity operating expenses, project costs, vendor services, managed security service providers, and security tool investments within approved budget parameters while providing input into future budget planning and resource prioritization.

The base pay range for this position is $142,000 to $199,000 annually. Actual compensation will be determined based on experience, qualifications, and other job-related factors permitted by law. This pay range represents the anticipated salary for this position at this time.

Wells Enterprises is an EEO/AA employer M/F/Vet/Dis

Wells Enterprises, a Ferrero company, is one of the largest ice cream manufacturers in the United States and the maker of well-loved brands including Blue Bunny, Halo Top, Bomb Pop, and Blue Ribbon Classics and today Trolli, Butterfinger 100grand, Baby Ruth, Nutella and Kinder Bueno

Wells Enterprises is a 2 billion company employing 4,000 employees, across 4 production plants and 2 main hub locations, Chicago and Le Mars Guided by innovation, quality, and a people-first mindset, Wells is committed to delighting consumers and developing exceptional teams.

As part of the Ferrero Group, Wells combines its strong U.S. heritage with Ferrero’s global standards of excellence, offering a unique opportunity to grow within a dynamic, values-driven, and international environment.

At Wells, our people—and their experience—sit at the heart of our ambition. Learn more at www.wellsenterprisesinc.com

What We Offer

At Wells, we’re proud to support our employees with comprehensive benefits that enhance health, financial wellness, and include paid time off (PTO). Eligible employees may also receive an annual incentive bonus based on Company performance. Learn more about our benefits here