Associate Director - Security Operations

We are Grant Thornton. We go beyond business as usual, so you can too.

Grant Thornton (GT) has nearly 3,000 people in 9 offices across Ireland, The Isle of Man, Gibraltar, and Bermuda, with a presence in over 145 countries around the world, and a global network of over 68,000 people.

Position Overview

We are seeking an experienced Associate Director of Security Operations to lead critical security initiatives and operations within our organisation. This senior-level role requires a seasoned cyber security professional with deep expertise in identity and access management, privileged access management, vulnerability management, and security operations centre management. The ideal candidate will have 10+ years of progressive experience in cyber security with hands-on expertise in enterprise security technologies and frameworks.

Key Responsibilities

Identity Access Management (IAM)

Lead the design, implementation, and management of enterprise IAM solutions and strategies
Oversee user lifecycle management, role-based access controls, and access governance programs
Develop and maintain IAM policies, procedures, and compliance frameworks
Collaborate with IT and business teams to ensure proper access provisioning and de-provisioning processes

CyberArk Privileged Access Management (PAAM)

Manage and optimize CyberArk PAAM infrastructure and implementations
Oversee privileged account discovery, onboarding, and lifecycle management
Ensure compliance with privileged access policies and regulatory requirements
Lead CyberArk platform upgrades, integrations, and security enhancements

Illumio Microsegmentation

Design and implement microsegmentation strategies using Illumio platform
Develop network security policies and zero-trust architecture initiatives
Monitor and analyze network traffic patterns and security events
Collaborate with network teams on segmentation deployment and maintenance

Certificate and Key Management

Oversee enterprise PKI infrastructure and certificate lifecycle management
Manage cryptographic key generation, distribution, storage, and rotation processes
Ensure compliance with certificate management policies and industry standards
Coordinate with vendors and internal teams on certificate-related projects

Security Operations Center (SOC) Management

Lead SOC operations, including 24/7 monitoring, incident response, and threat hunting
Develop and maintain security monitoring use cases, playbooks, and procedures
Manage SOC analyst teams and provide technical guidance and mentorship
Oversee security incident escalation processes and coordination with stakeholders

Microsoft Data Loss Prevention (DLP)

Design and implement Microsoft DLP policies and configurations
Monitor and analyze data exfiltration attempts and policy violations
Develop data classification schemes and protection strategies
Provide guidance on data handling procedures and compliance requirements

Qualys Vulnerability and Patch Management

Lead enterprise vulnerability management program using Qualys platform
Oversee vulnerability scanning, assessment, and remediation processes
Manage patch management operations and coordinate with system administrators
Develop vulnerability metrics, reporting, and risk assessment frameworks

Required Qualifications

Experience and Skills

Minimum 10 years of progressive experience in cybersecurity and information security
5+ years in leadership or senior technical roles within security operations
Extensive hands-on experience with CyberArk PAAM implementation and management
Proven expertise in Identity and Access Management solutions and frameworks
Strong experience with Illumio microsegmentation platform
Deep knowledge of PKI, certificate management, and cryptographic systems
Comprehensive experience managing Security Operations Center (SOC) operations
Proficiency in Microsoft DLP configuration, policy development, and management
Expert-level knowledge of Qualys vulnerability management and patch management platforms
Strong understanding of security frameworks (NIST, ISO 27001, CIS Controls)
Experience with compliance requirements (SOX, PCI DSS, HIPAA, etc.)

Technical Competencies

Advanced knowledge of network security, firewalls, and intrusion detection systems
Proficiency in security information and event management (SIEM) platforms
Strong scripting and automation skills (PowerShell, Python, Bash)
Experience with cloud security (AWS, Azure, GCP)
Knowledge of threat intelligence platforms and threat hunting methodologies
Understanding of DevSecOps practices and security automation

Leadership and Communication

Proven ability to lead cross-functional teams and manage complex security projects
Excellent communication skills with ability to present to executive leadership
Strong analytical and problem-solving capabilities
Experience in vendor management and contract negotiations
Ability to translate technical concepts to business stakeholders

Preferred Qualifications

Bachelor's degree in Computer Science, Information Security, or related field
Master's degree in Cybersecurity or MBA preferred
Industry certifications such as CISSP, CISM, CISA, or equivalent
CyberArk certifications (Defender, Sentry, Guardian)
Illumio platform certifications
Qualys certifications (VMDR, VMPC)
Microsoft Security certifications
Experience in regulated industries (financial services, healthcare, government)

Education Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related technical field
Equivalent combination of education and experience will be considered

Working Conditions

Full-time position with occasional after-hours work for incident response
Hybrid work environment with flexibility for remote work
May require travel for conferences, training, or vendor meetings
On-call responsibilities for critical security incidents

Life at GT

Reward and benefits:

Our reward and benefits are designed to create an environment where our people can flourish. We are committed to building a culture where our people have access to the necessary benefits to help promote a healthy lifestyle and thrive.

Inclusion and diversity:

Included and valued for your difference is how everyone should feel at work. Not just because it is right, but because we are all at our best when we are able to be ourselves. So, when you join Grant Thornton, we will work hard to ensure that is how you feel. We want you for who you are. We are excited to see the personality and perspectives you will bring to our team because we know we will all benefit from them.

Diversity of thought, background and experience enables better decision-making, improves the quality of our delivery, and helps us to meet the needs of our clients. Our firm is built on people and their ideas, so we want to hear all the

new perspectives and fresh thinking you have to offer.

Recognition:

We want to create a culture of recognition and celebrating success, by saying thank you to people who surpass our expectations and recognising the right values and behaviours. Our Shout Out recognition scheme is our way of highlighting and promoting achievements. Whether you simply want to say thank you, celebrate a special occasion or give an award for doing something exceptional, you can do all of this and more through the scheme.

#LI-LM1

Associate Director - Security Operations

Job Description