Associate Director, Cyber Defense

Job Title

Associate Director, Cyber Defense Department: Health System Shared Services | Information Technology Administration

Job Description

The Associate Director, Cyber Defense is responsible for the strategic vision, governance, and maturation of the medical center's defensive security capabilities. Reporting directly to the OSUWMC Chief Information Security Officer (CISO), this role provides executive and operational oversight across four core pillars: governing our partner-led Managed Security Operations Center (mSOC), directing the enterprise Vulnerability Management program (encompassing IT, IoT, and medical IoT/mIoT devices), architecting a Threat Intelligence capability, and scaling the Incident Response (IR) function. A primary focus of this role is establishing strategic alignment and seamless collaboration between OSUWMC departments, the OSU Office of Technology and Digital Innovation (OTDI), and external security vendors. The Associate Director ensures threat-driven defense by maintaining runbooks, optimizing vendor performance against SLAs, and spearheading active, measurable iterative controls validation of the Information Security and Privacy Control Requirements (ISPCR). As a key member of the Information Security leadership team, this position requires an elevated level of autonomy, significant executive decision-making authority, and a proven track record of directly leading, mentoring, and growing technical cybersecurity teams. The Associate Director serves as a people leader responsible for driving staff engagement, fostering technical growth, and cultivating a high-trust team culture, alongside extensive experience steering third-party partners and cross-functional technical teams within a highly matrixed environment.

Required Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent combination of education and experience.
• Experience: 7 years of progressive leadership experience in cybersecurity operations or engineering, with personnel management or supervisory experience leading technical teams.

Desired Qualifications

• Regulated Environments: Experience operating cybersecurity programs in highly regulated environments such as healthcare, higher education, government, or other critical infrastructure sectors.
• Advanced Degree: Master’s degree in Cybersecurity, Business Administration (MBA), Healthcare IT, or a related field.
• Certifications: Active industry-standard certifications such as: Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM)
• Frameworks & Standards: Working knowledge of NIST Cybersecurity Framework (CSF), NIST 800-53, MITRE ATT&CK, CIS Controls, and healthcare-specific security guidance.
• Vendor Management: Proven experience establishing governance frameworks for and holding third‑party managed service providers (MSSP/mSOC) accountable via strict SLAs.
• Capability Architecture: Demonstrated success building, structuring, or significantly maturing cybersecurity functions (specifically Incident Response frameworks or Threat Intelligence programs) from the ground up.
• Incident Command: Hands‑on experience leading incident command structures and coordinating responses to enterprise‑wide security incidents, breaches, or advanced threats.
• Vulnerability Frameworks: Familiarity with modern vulnerability management concepts (risk‑based prioritization vs. raw CVSS scoring) across enterprise and clinical environments.
• Communication & Collaboration: Exceptional relationship management skills with a track record of translating complex technical threats into quantifiable business risk for senior medical center and university leadership.

Location

Ackerman Rd, 660 (0242)

Position Type

Regular

Scheduled Hours

40

Shift

First Shift

Background Check

Final candidates are subject to successful completion of a background check. A drug screen or physical may be required during the post offer process.

Benefits

• Medical, dental and vision coverage, with Ohio State paying a significant portion of the cost.
• Paid time off, including sick and vacation time and 11 holidays.
• State retirement plan or an alternative retirement plan, both with generous employer contributions.

Thank you for your interest in positions at The Ohio State University and Wexner Medical Center. Once you have applied, the most updated information on the status of your application can be found by visiting the Candidate Home section of this site. Please view your submitted applications by logging in and reviewing your status. For answers to additional questions please review the frequently asked questions. The university is an equal opportunity employer, including veterans and disability. At Ohio State, you’ll find work that inspires you. We offer roles and growth opportunities in countless fields and specialties — including a job that’s right for you. Ohio State benefits give you options to take care of what matters most to you — and opportunities to make adjustments as your life and needs change, including:

As Buckeyes, we accomplish more together. No matter your role, you’ll be part of creating what people need now: pathways to education, research and health care. Working at Ohio State means you’re part of a team with a strong sense of community and an unwavering commitment to excellence — and, of course, incomparable Buckeye spirit. We bring out the best in people, help each other succeed and learn together. By joining Ohio State, you become part of a top-20 public university with one of America’s leading academic health centers. We’re a team of dedicated colleagues with access to boundless resources that support you. Review the Frequently Asked Questions for details on using Workday and submitting your application.