Director, Cybersecurity

Cybersecurity Jobs; Atlanta (GA); On-site; USD 180,000 - 230,000; Full time

Job summary

Asset Living is seeking a cybersecurity leader to drive enterprise strategy, governance, and day-to-day security operations in a serverless, cloud-first Microsoft 365 environment.

This role will standardize the cybersecurity program, build a scalable security operating model, and deliver a multi-year roadmap aligned to NIST CSF 2.0 and CIS Controls v8.1. You will lead threat detection, incident response playbooks, and crisis management initiatives across the organization.

Qualifications

• Education in Cybersecurity or related field; equivalent experience considered.
• 8+ years IT/cybersecurity experience.
• 3+ years in a cybersecurity leadership role.

Responsibilities

• Develop and maintain threat detection and incident response playbooks and runbooks.
• Align security programs with NIST CSF 2.0 and CIS Controls; drive crisis readiness.
• Lead security monitoring, vulnerability management, and cloud security programs.
• Oversee identity and access management, Entra ID SSO adoption, and governance.

Skills

Threat detection

Incident response

Crisis management

Security monitoring

Cloud security

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft 365 Defender

Azure

Entra ID

SIEM

Job description

Asset Living is seeking a cybersecurity leader to drive enterprise strategy, governance, and day-to-day security operations in a serverless, cloud-first Microsoft 365 environment. This role standardizes the cybersecurity program, builds a scalable security operating model, and delivers a multi-year roadmap aligned to NIST CSF 2.0 and CIS Controls v8.1.

Responsibilities

• Lead the development, maintenance, and continuous improvement of enterprise threat detection and incident response playbooks and runbooks, covering detection, containment, mitigation, remediation, recovery, and post-incident lessons learned across the organization.
• Drive enterprise cyber-attack preparedness and crisis readiness by aligning people, processes, technologies, and testing programs to minimize operational risk and business impact.
• Develop, maintain, and operationalize enterprise incident response and crisis management, including response plans, tabletop exercises, recovery testing, and stakeholder communications to support rapid containment and effective decision-making.
• Implement and optimize security awareness training using industry best practices and measurable performance metrics to reduce human risk and provide leadership visibility into awareness, engagement, and effectiveness of risk mitigation.
• Continuously improve outsourced cybersecurity services by maturing security monitoring, threat detection and response, vulnerability management, cloud security, threat intelligence, and security validation programs to strengthen security posture.
• Own and optimize enterprise security monitoring and protection capabilities, including EDR, ITDR, MDR, SIEM, vulnerability management, and cloud posture.
• Oversee continuous threat exposure management through network vulnerability scanning, external penetration testing, and dark web scans.
• Maintain visibility and control over the organization’s cloud application portfolio through continuous discovery, classification, risk evaluation, and security oversight.
• Oversee enterprise identity and access management, driving adoption of Entra ID SSO, SCIM-based automated provisioning, and centralized identity governance across connected applications.
• Oversee enterprise identity and access governance for both Entra-integrated and non-SSO applications, ensuring secure authentication and authorization, user lifecycle management, and periodic access reviews.
• Develop, maintain, and annually update security policies and procedures while conducting regular tabletop exercises to validate incident response readiness, including DR, IR, and BC.
• Oversee management and optimization of email firewalls including DMARC policy, and network firewalls with IDS/IPS.
• Provide monthly executive reporting.
• Build and manage clear internal cybersecurity team roles, responsibilities, and operating processes aligned with strategic MSSP partnerships.
• Leverage deep Microsoft 365 Defender and Azure expertise to maximize security telemetry, visibility, and threat response through strategic integration of Microsoft with third-party security platforms.
• Establish clearly defined roles, responsibilities, escalation paths, and accountability across internal teams and MSSP partners to ensure effective security operations, service delivery, continuous improvement, and organizational maturity.

Requirements

• Relevant education in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is preferred; equivalent professional experience will be considered.
• 8+ years of progressive IT and cybersecurity experience.
• 3+ years in a cybersecurity leadership role.
• Experience leading cybersecurity transformation initiatives aligned to NIST CSF 2.0 and CIS Controls.

Technologies

• Microsoft 365, Microsoft 365 Defender, Azure, Entra ID, Defender, Intune, Purview, SCIM
• MSSPs, EDR, ITDR, MDR, SIEM, Vulnerability Management, Cloud Posture
• DMARC, IDS/IPS
• NIST CSF 2.0, CIS Controls v8.1
• Tabletop exercises, dark web scans, external penetration testing, network vulnerability scanning
• DR, IR, BC, security validation programs, threat intelligence