Associate Director Cyber Security

RBW Consulting; Gaithersburg (MD); On-site; USD 130,000 - 160,000; Full time

Job summary

A consulting firm is seeking an experienced Associate Director of Cyber Security in Gaithersburg, Maryland to lead cyber strategy and daily operations. This role includes evolving the security strategy, managing cloud and on-prem environments, and overseeing security frameworks. The ideal candidate has over 4 years in a senior cybersecurity role, relevant certifications, and expertise in managing SOC providers. Strong communication skills are essential for translating complex risks to stakeholders. The position requires working onsite 5 days a week.

Qualifications

• 4+ years in a senior cyber security role leading operations, strategy, or incident response.
• Certifications such as CISSP, CISM, CISA, or CCNP Security.
• Strong experience with multi-cloud environments.

Responsibilities

• Lead and evolve cyber security strategy and policies.
• Design and implement layered security architecture.
• Drive vulnerability management and penetration testing.

Skills

Leadership in Cyber Security

SIEM

SOAR

Vulnerability Management

Communication Skills

Education

Degree in Cyber Security or related field

Tools

Cisco Security Stack

AWS

Azure

Job description

Associate Director of Cyber Security – IT Operations

5 Days a week onsite

We’re looking for an experienced Associate Director of Cyber Security to lead the cyber strategy and day‑to‑day security operations. This is a hands‑on leadership role, responsible for strengthening security posture across on‑prem, Azure, and AWS environments, using Cisco security stack to protect people and digital assets from modern threats.

What you’ll do

• Lead and evolve cyber security strategy, roadmap, and policies.
• Design and implement layered security architecture across cloud and on‑prem.
• Own SIEM and SOAR platforms, including use cases, automation, tuning, and onboarding.
• Drive vulnerability management, penetration testing, and remediation activities.
• Integrate threat intelligence and proactively strengthen detection capabilities.
• Oversee Windows/Linux hardening and security standards (CIS, ISO 27001, NIST, GDPR, Cyber Essentials).
• Support security architecture across global IT infrastructure.
• Manage external SOC provider and internal cyber engineer.
• Lead incident response, investigations, and on‑call rotation when required.
• Deliver security awareness training, phishing simulation campaigns, and reporting.
• Act as a trusted advisor to the business, communicating risk clearly and effectively.

What you’ll bring

• Degree in Cyber Security, Information Security, Computer Science, or related field.
• 4+ years in a senior cyber security role leading operations, strategy, or incident response.
• Certifications such as CISSP, CISM, CISA, or CCNP Security.
• Strong experience with SIEM, SOAR, EDR, vulnerability management, and multi‑cloud (Azure/AWS).
• Deep understanding of security frameworks and compliance standards.
• Hands‑on experience with security hardening for Windows and Linux.
• Proven ability to manage SOC providers and mentor security staff.
• Excellent communication skills, able to translate complex risk to non‑technical stakeholders.

Nice to have

• Experience in Life Sciences or Pharmaceutical environments (GxP).
• Knowledge of cloud architecture, containerisation, automation, and hybrid infrastructure.