Director, Cybersecurity

Asset Living is seeking a cybersecurity leader to drive enterprise strategy, governance, and day-to-day security operations in a serverless, cloud-first Microsoft 365 environment . This role standardizes the cybersecurity program, builds a scalable security operating model, and delivers a multi-year roadmap aligned to NIST CSF 2.0 and CIS Controls v8.1 .

Responsibilities

• Lead the development, maintenance, and continuous improvement of enterprise threat detection and incident response playbooks and runbooks , covering detection, containment, mitigation, remediation, recovery, and post-incident lessons learned across the organization.
• Drive enterprise cyber-attack preparedness and crisis readiness by aligning people, processes, technologies, and testing programs to minimize operational risk and business impact.
• Develop, maintain, and operationalize enterprise incident response and crisis management , including response plans, tabletop exercises , recovery testing, and stakeholder communications to support rapid containment and effective decision-making.
• Implement and optimize security awareness training using industry best practices and measurable performance metrics to reduce human risk and provide leadership visibility into awareness, engagement, and effectiveness of risk mitigation.
• Continuously improve outsourced cybersecurity services by maturing security monitoring , threat detection and response , vulnerability management , cloud security , threat intelligence , and security validation programs to strengthen security posture.
• Own and optimize enterprise security monitoring and protection capabilities, including EDR , ITDR , MDR , SIEM , vulnerability management , and cloud posture .
• Oversee continuous threat exposure management through network vulnerability scanning , external penetration testing , and dark web scans .
• Maintain visibility and control over the organization’s cloud application portfolio through continuous discovery, classification, risk evaluation, and security oversight.
• Oversee enterprise identity and access management , driving adoption of Entra ID SSO , SCIM-based automated provisioning , and centralized identity governance across connected applications.
• Oversee enterprise identity and access governance for both Entra-integrated and non-SSO applications, ensuring secure authentication and authorization, user lifecycle management, and periodic access reviews.
• Develop, maintain, and annually update security policies and procedures while conducting regular tabletop exercises to validate incident response readiness, including DR , IR , and BC .
• Oversee management and optimization of email firewalls including DMARC policy , and network firewalls with IDS/IPS .
• Provide monthly executive reporting .
• Build and manage clear internal cybersecurity team roles, responsibilities, and operating processes aligned with strategic MSSP partnerships.
• Leverage deep Microsoft 365 Defender and Azure expertise to maximize security telemetry, visibility, and threat response through strategic integration of Microsoft with third-party security platforms.
• Establish clearly defined roles, responsibilities, escalation paths, and accountability across internal teams and MSSP partners to ensure effective security operations, service delivery, continuous improvement, and organizational maturity.

Requirements

• Relevant education in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is preferred; equivalent professional experience will be considered .
• 8+ years of progressive IT and cybersecurity experience.
• 3+ years in a cybersecurity leadership role.
• Experience leading cybersecurity transformation initiatives aligned to NIST CSF 2.0 and CIS Controls .

Technologies

• Microsoft 365, Microsoft 365 Defender, Azure, Entra ID, Defender, Intune, Purview, SCIM
• MSSPs, EDR, ITDR, MDR, SIEM, Vulnerability Management, Cloud Posture
• DMARC, IDS/IPS
• NIST CSF 2.0, CIS Controls v8.1
• Tabletop exercises, dark web scans, external penetration testing, network vulnerability scanning
• DR, IR, BC, security validation programs, threat intelligence