Director, Cybersecurity

About Ascend

Ascend empowers entrepreneurial CPAs to reach their goals with an innovative growth model that brings their firms into the new age. Backed by private equity from people-focused Alpine Investors, Ascend is building a modern platform for regional accounting firms that enables them to stay independent while accessing the resources of a large CPA firm to help them grow. Ascend provides access to growth capital, robust talent acquisition, best-of-breed technology, a catalytic leadership system, shared back-office services, and modernized equity incentives so that firms can surmount today’s industry challenges and reach their full potential. Founded in January 2023, the company attained revenues sufficient to qualify it as a Top 100 U.S. accounting firm within six months of operations.

For more information, visit ascendtogether.com.

About Alpine Investors

Alpine Investors is a people-driven private equity firm that is committed to building great companies by working with, learning from, and developing exceptional people. Alpine prides itself on fostering cultures where people value empowerment, diversity, fairness, integrity, and intellectual honesty. Founded in 2001, Alpine specializes in investments in companies in the software and services industries. Alpine has over $17 billion in AUM and has offices in San Francisco, New York, and Salt Lake City.

For more information on the firm, visit www.alpineinvestors.com

Position Summary

Ascend is seeking a Director of Cybersecurity to build and run the enterprise cybersecurity program that protects sensitive client financial data across Ascend and its growing network of tax, audit, and client advisory services (CAS) partner firms. This individual will own security strategy, operations, and incident response; governance, risk, and compliance (NIST CSF 2.0, SOC 2 Type II, PCI DSS); identity and Zero Trust; AI governance and agentic security; and the security workstream of every acquisition — building a program designed to scale with the pace of acquisition without slowing the business down.

The Director of Cybersecurity will report to the Vice President, Technology Infrastructure & Cybersecurity.

Key Responsibilities

Cybersecurity Strategy, Program & Budget Leadership

• Own the enterprise cybersecurity strategy and multi-year roadmap, sequencing initiatives against partner-firm seasonality (tax deadlines) and the broader TST (Technology Stack Transition) integration timeline; present strategy and progress to the Vice President, Technology Infrastructure & Cybersecurity.
• Define, track, and report a concise set of security metrics and program-maturity indicators (NIST CSF 2.0 function scores, MTTD/MTTR, patch/vulnerability SLA attainment, phishing failure rate, control coverage) to executive leadership on a fixed cadence.
• Develop and manage the cybersecurity budget for tooling, MSSP/vendor contracts, and headcount, keeping security cost transparent and competitive across partner firms.
• Manage relationships and contracts with managed security service providers and security vendors (e.g., Microsoft, CrowdStrike), securing preferred pricing and early access to product roadmaps and preview programs.

Security Operations & Incident Response

• Own endpoint detection and response (CrowdStrike Falcon), security monitoring and log management, vulnerability management, and email security across Ascend and all partner firms.
• Serve as incident commander for cybersecurity incidents; maintain and test the incident response plan through regular tabletop exercises, and lead post-incident reviews and remediation to closure.
• Establish detection coverage, alert triage, and escalation standards, and determine the right outsourced-vs.-in-house MSSP model for 24x7 monitoring.
• Define vulnerability and patch SLAs by asset criticality and partner with infrastructure and service-desk teams to ensure remediation lands; engage a qualified external firm to conduct periodic penetration testing.

Governance, Risk & Compliance

• Own the governance, risk, and compliance program, including enterprise risk assessments and security policies and standards aligned to NIST CSF 2.0.