Associate Director Jobs

About The Position

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent relevant experience in lieu of a degree.
• Five or more years of progressive experience in cybersecurity, IT security, systems administration, cloud security, or a related technical discipline.
• Three or more years of experience leading security operations, security projects, technical teams, or cross-functional security initiatives.
• Strong experience in security operations and incident response, including detection triage, investigation, containment, recovery, and post-incident review.
• Ability to translate security strategy into operational execution by setting priorities, assigning ownership, tracking actions, communicating status, and escalating unresolved decisions or risks.
• Working knowledge of Microsoft security technologies, including Microsoft 365, Entra ID, Intune, Defender, Conditional Access, and Purview.
• Experience with EDR/XDR, SIEM, vulnerability management, email security, network security, and cloud platforms such as AWS and Azure.
• Experience with, or strong aptitude to rapidly develop proficiency in, managed detection and response operations, security-vendor management, endpoint and identity coverage assessment, and remediation coordination across decentralized teams.
• Familiarity with security frameworks and regulatory requirements, including NIST CSF, CIS Controls, SOC 2, HIPAA, and FTC Safeguards Rule.
• Ability to translate technical risks into practical business impact and clear recommendations for executive leadership.
• Strong written, verbal, organizational, and stakeholder-management skills.
• Ability to work independently, manage competing priorities, and remain composed during security incidents.
• Aptitude in emerging AI-agent and automation architectures, including identity, permissions, integrations, data flows, logging, and human-in-the-loop controls.
• Sound judgment and a risk-based approach to decision-making; technical curiosity and ability to investigate complex issues.
• Ability to balance security requirements with mission, operational, and user needs; demonstrate ownership, follow-through, and attention to detail.
• Collaborative leadership and ability to influence without relying solely on direct authority.
• High integrity and discretion when handling sensitive information.
• Authorization to work for any employer in the United States; the employer is unable to sponsor or take over sponsorship of an employment visa.

Nice To Haves

• Master’s degree in a related field.
• Certifications such as CISSP, CISM, CRISC, GCIH, GCIA, Security+, CEH, CCSP, Microsoft SC-100, SC-200, AZ-500, AWS Security Specialty, or equivalent.
• Experience supporting a nonprofit, healthcare, human-services, multi-entity, or similarly regulated environment.
• Experience operating CrowdStrike Falcon Complete, Falcon Identity, Exposure Management, and/or CrowdStrike Next-Gen SIEM/LogScale, including vendor coordination, coverage assessment, alert and case review, and remediation tracking.
• Experience with Microsoft Defender, Microsoft Purview, Fortinet, Salesforce, Workday, or similar enterprise platforms.
• Experience building or improving a cybersecurity program in a distributed or multi-affiliate organization.
• Experience managing MSSP, MDR, incident-response, or other security-vendor relationships.
• Experience assessing or governing AI-enabled applications, agents, copilots, automations, APIs, or low-code integrations in an enterprise environment.

Responsibilities

• Support the Director of Cyber Security in developing, implementing, and maintaining the cybersecurity strategy, roadmap, policies, standards, and operating procedures.
• Lead day-to-day security operations, including alert triage, investigations, incident coordination, and remediation follow-through.
• Translate executive priorities and risk decisions into actionable plans; assign owners, track commitments, and escalate blockers, tradeoffs, and unresolved decisions to the Director of Cyber Security.
• Oversee and optimize security platforms for endpoint detection and response, identity protection, SIEM and log management, Microsoft 365, cloud, email, and data protection.
• Manage the operational relationship with CrowdStrike Falcon Complete and related services; assess coverage, alert quality, escalation effectiveness, and investigations, and coordinate remediation with IT and affiliate teams.
• Manage and mature incident response, including documentation, containment coordination, lessons learned, tabletop exercises, and executive reporting.
• Coordinate risk-based vulnerability and exposure remediation with infrastructure, cloud, application, and affiliate IT teams.
• Partner with Identity and Access Management teams to strengthen MFA, Conditional Access, privileged access, account lifecycle processes, and third-party access controls.
• Improve security logging and detection engineering by onboarding priority data sources, tuning detections, reducing false positives, and improving investigation workflows.
• Establish and operate AI security governance for employee-built agents, automations, and AI-enabled workflows, maintaining visibility into their capabilities, access, data, and accountable owners.
• Support third-party risk assessments, vendor security reviews, contract security requirements, and ongoing vendor-risk tracking.
• Assist with compliance and assurance initiatives, including SOC 2, NIST Cybersecurity Framework, HIPAA, FTC Safeguards Rule, and other applicable obligations.
• Develop security metrics and leadership reports on incidents, vulnerability remediation, endpoint coverage, phishing performance, identity risk, and program maturity.
• Coordinate with affiliate IT leaders to implement security standards consistently while accounting for operational and local business needs.
• Build technical understanding of AI agents, connectors, automations, and integrations; partner with Data Governance, application teams, and business owners on guardrails for identity, permissions, data handling, logging, human oversight, and change management.
• Help lead security awareness and phishing-training programs for employees and contractors.
• Serve as an escalation point for complex technical security issues and mentor, guide, and provide quality assurance for security analysts and engineers.
• Participate in an on-call or incident-response rotation as needed.