Director, Cybersecurity

assetliving; Dallas (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Asset Living seeks a Director of Cybersecurity to lead enterprise cybersecurity strategy in a cloud-first Microsoft 365 environment, aligning with NIST CSF 2.0 and CIS Controls. This leader will mature security capabilities, oversee incident response, and optimize MSSP partnerships to strengthen resilience across the organization.

The role requires building and mentoring a high-performing team, establishing clear roles, and driving ongoing improvements to protect critical assets and data.

Qualifications

• Deep Microsoft 365 enterprise expertise and security capabilities.
• Experience leveraging MSSPs to enhance security visibility.
• Ability to lead a mature, risk-based security program.

Responsibilities

• Define internal cybersecurity roles, responsibilities, and processes aligned with MSSP partnerships.
• Maximize security telemetry via Microsoft 365 Defender and Azure with third‑party platforms.
• Develop and maintain threat detection and incident response playbooks across the organization.
• Ensure cyber-attack preparedness and crisis readiness to minimize risk and impact.
• Build incident response and crisis management programs with tabletop exercises and communications.

Skills

Microsoft 365 Defender

Azure security

Threat detection

Incident response

Tools

Entra ID

Defender

Intune

Purview

Job description

Company Overview

Asset Living is a third-party management firm and a proven partner in fostering thriving communities nationwide. Founded in 1986, Asset Living has decades of experience delivering exceptional value to our partners. Since the beginning, our undeniable passion has driven our organic growth from a small property management firm to one of the most trusted allies in real estate. Asset Living's growing portfolio includes a multitude of properties across the country that span the multifamily, single-family home rentals, affordable housing, build-to-rent, active adult, and student housing divisions.

Asset Living is a fast-growing company made up of talented individuals from diverse backgrounds that differentiate us and help us drive innovation and results for our clients and communities across the US. At Asset Living, we wholeheartedly believe 'Together We Lead, Together We Succeed. We empower each other to lead by example, collaborate, and evolve - inspired by our belief that we can continually improve as individuals and as an organization. Together, we create an environment where every voice is heard, every idea is valued, and every individual experiences opportunities to grow as our company grows. When you join Asset Living, you become part of a dynamic team that thrives on unity, unique talents, and a universal culture of winning.

Recognized as one of the nation's Best and Brightest Places to Work and ranked in the NMHC top 50 professionals, join Asset Living because of its reputation as the most trusted partner in real estate, workplace culture, and growth opportunities. Asset Living is a member of The Institute of Real Estate Management (IREM) and is recognized as an Accredited Management Organization (AMO). Together, we lead the way, and together, we achieve excellence in all that we do. Join a workplace where success is a collective journey and leadership is a shared responsibility.

Director, Cybersecurity

The Director of Cybersecurity is responsible for leading the organization's enterprise cybersecurity strategy, governance, and operations in a serverless cloud-first Microsoft 365 technology environment. This role will drive the centralization and standardization of the cybersecurity program, establish a scalable security operating model, and mature security capabilities across the enterprise. The Director will develop and execute a multi-year cybersecurity roadmap aligned with business objectives, M&A activity, NIST CSF 2.0, CIS Controls v8.1, and evolving risk landscapes to strengthen the organization's security posture and resilience.

The ideal candidate possesses deep Microsoft 365 enterprise expertise and understands how to maximize the value of both native Microsoft security capabilities and MSSPs to create a comprehensive, telemetry-driven cybersecurity program. This leader will optimize the collection, integration, and operationalization of security data across Microsoft 365, Entra ID, Defender, Intune, Purview, and third-party security platforms, ensuring MSSPs are strategically leveraged to enhance visibility, accelerate threat detection and response, and provide actionable insights that strengthen the organization's overall security posture.

The position will establish clearly defined roles, responsibilities, escalation paths, and accountability across internal teams and MSSP partners to ensure effective security operations, service delivery, continuous improvement, and organizational cybersecurity maturity.

The ideal candidate is a strategic leader who can define and execute a compelling cybersecurity vision while building and mentoring a high-performing cybersecurity team. This role is responsible for creating and advancing a mature, risk-based security program aligned with the NIST CSF 2.0 and CIS Controls v8.1, while developing and maintaining a collaborative operating model with MSSPs.

Essential Duties & Responsibilities

• Build and manage clear internal cybersecurity team roles, responsibilities, and operating processes aligned with strategic MSSP partnerships.
• Leverage deep Microsoft 365 Defender and Azure expertise to maximize security telemetry, visibility, and threat response through the strategic integration of Microsoft with third‑party security platforms.
• Lead the development, maintenance, and continuous improvement of enterprise threat detection and incident response playbooks and runbooks, ensuring effective detection, containment, mitigation, remediation, recovery, and post‑incident lessons learned activities across the organization.
• Lead enterprise cyber‑attack preparedness and crisis readiness by aligning people, processes, technologies, and testing programs to minimize operational risk and business impact from cyber incidents.
• Develop, maintain, and operationalize enterprise incident response and crisis management programs, including response plans, tabletop exercises, recovery testing, and stakeholder communications, to ensure rapid containment,