Associate Director, Cyber Defense & Incident Response

The Ohio State University Wexner Medical Center; Columbus (OH); On-site; USD 140,000 - 200,000; Full time

Job summary

The Ohio State University Wexner Medical Center is seeking an Associate Director, Cyber Defense to lead the strategic development of the medical center's defensive security capabilities. You will report to the CISO and direct executive oversight of mSOC, vulnerability management, threat intelligence, and incident response programs.

You will align security initiatives with OSU OTDI and external vendors, maintain runbooks, and drive measurable improvements through controls validation of ISPCR.

Qualifications

• Education: Bachelor's degree in CS/IT/Cybersecurity or equivalent.
• 7 years progressive leadership experience in cybersecurity operations or engineering with supervisory duties.
• Experience in regulated environments (healthcare, higher education, government, or critical infrastructure).

Responsibilities

• Provide strategic vision and governance for the medical center's defensive security capabilities.
• Oversee governance of partner-led mSOC, Vulnerability Management, Threat Intelligence, and Incident Response.
• Align security programs with OSU OTDI and external vendors; manage runbooks and SLA delivery.
• Lead, mentor, and develop technical cybersecurity teams within a matrixed organization.
• Drive measurable, iterative controls validation of ISPCR across domains.
• Collaborate with senior leadership to translate threats into business risk.

Skills

Leadership

Vendor management

Incident command

Cross-functional collaboration

Communication

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Master’s degree in Cybersecurity or related field

CISSP

CISM

Tools

NIST CSF

NIST 800-53

MITRE ATT&CK

CIS Controls

MSSP governance

Job description

The Ohio State University Wexner Medical Center is seeking an Associate Director, Cyber Defense to lead the strategic development of the medical center's defensive security capabilities. You will report to the CISO and direct executive oversight of mSOC, vulnerability management, threat intelligence, and incident response programs.

You will align security initiatives with OSU OTDI and external vendors, maintain runbooks, and drive measurable improvements through controls validation of ISPCR.