Cybersecurity Manager

Asset Living•Dallas, TX

About The Position

The Cybersecurity Manager leads Asset Living’s enterprise cybersecurity strategy, governance, and operations in a serverless, cloud-first Microsoft 365 environment. The role centralizes and standardizes the cybersecurity program, establishes a scalable security operating model, and matures security capabilities across the enterprise. The manager develops and executes a cybersecurity roadmap aligned with business objectives, mergers and acquisitions activity, NIST CSF 2.0, CIS Controls v8.1, and changing risk conditions. The position uses Microsoft 365 security capabilities and managed security service providers (MSSPs) to build a comprehensive, telemetry-driven program. It optimizes security data collection, integration, and operational use across Microsoft 365 Defender, Entra ID Suite, Intune, Purview, and third-party platforms. The manager defines responsibilities, escalation paths, and accountability across internal teams and MSSP partners, and builds and mentors a cybersecurity team. The role also advances incident response, crisis readiness, identity and access governance, security awareness, and executive reporting.

Requirements

At least 6 years of progressive IT and cybersecurity experience.
Experience leading cybersecurity transformation initiatives aligned with frameworks such as NIST CSF 2.0 and CIS Controls.
Deep Microsoft 365 enterprise expertise and understanding of how to use native Microsoft security capabilities and MSSPs.
Expertise with Microsoft 365 Defender and Azure.
Relevant education in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is preferred; equivalent professional experience will be considered.

Nice To Haves

Relevant education in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

Responsibilities

Build and manage internal cybersecurity team roles, responsibilities, and operating processes aligned with strategic MSSP partnerships.
Use Microsoft 365 Defender and Azure expertise to improve security telemetry, visibility, and threat response through integration with third-party security platforms.
Lead the development, maintenance, and improvement of enterprise threat-detection and incident-response playbooks and runbooks, including detection, containment, mitigation, remediation, recovery, and post-incident lessons learned.
Lead enterprise cyber-attack preparedness and crisis readiness by aligning people, processes, technologies, and testing programs to reduce operational risk and business impact.
Develop, maintain, and operationalize incident-response and crisis-management programs, including response plans, tabletop exercises, recovery testing, and stakeholder communications.
Implement and optimize security-awareness training programs and measurable performance metrics.
Improve outsourced cybersecurity services across security monitoring, threat detection and response, vulnerability management, cloud security, threat intelligence, and security validation.
Own and optimize security monitoring and protection capabilities, including EDR, ITDR, MDR, SIEM, vulnerability management, and cloud posture.
Oversee continuous threat exposure management through network vulnerability scanning, external penetration testing, and dark web scans.
Maintain visibility and control over cloud applications through discovery, classification, risk evaluation, and security oversight.
Oversee enterprise identity and access management, including Entra ID SSO adoption, SCIM-based automated provisioning, and centralized identity governance.
Oversee identity and access governance for Entra-integrated and non-SSO applications, including authentication, authorization, user lifecycle management, and periodic access reviews.
Develop, maintain, and annually update security policies and procedures, and conduct tabletop exercises to validate disaster recovery, incident response, and business continuity readiness.
Oversee the management and optimization of email firewalls, including DMARC policy.
Oversee the management and optimization of network firewalls and IDS/IPS.
Provide monthly executive reporting.