Director, Information Security – Technology

This is a fully remote position, open to applicants in Alaska, +7 more states.

📋 Description

• Take ownership of and enhance GameChanger's extensive security and technology strategy over multiple years, focusing on prioritization, resource allocation, alignment with business and parent company objectives, and conveying security investments and trade-offs to both technical and executive leadership.

• Lead, mentor, and develop a team of security and technology operations professionals by establishing priorities, coaching team members, managing performance, fostering growth opportunities, and creating a supportive environment for autonomy and ownership.

• Direct and ensure the delivery of all critical aspects of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions.

• Assess and mitigate risks across infrastructure, product, and corporate settings.

• Establish guidelines for AI security and governance within a secure software development lifecycle (SDLC) and corporate environment, overseeing the secure integration of AI tools, the security of AI-enabled product features, and governance of AI usage, collaborating with AI enablement and governance stakeholders throughout the organization.

• Oversee the governance, risk, and compliance program, which includes conducting internal assessments (such as NIST CSF 2.0), external evaluations, and providing clear risk reports to leadership.

• Manage the security operations and incident response program for the GameChanger environment, encompassing detection, on-call duties, escalation, and coordination with our parent company's security division.

• Handle internal technology operations, including the technology support services for our remote-first workforce and the systems and endpoints that employees depend on to perform their tasks.

• Manage the Business Information Security Officer (BISO) relationship with DSG, covering decision rights, shared services integration, and the partnership with the DSG Chief Information Security Officer (CISO).

• Lead the cross-departmental security steering committee and advocate for security and technology in executive forums to foster alignment and support for key initiatives.

• Educate and influence the wider company regarding security principles, threats, and best practices.

⛳️ Requirements

• Over 10 years of progressive experience in security, including direct management experience leading managers and multidisciplinary security teams.

• Proven history of establishing or significantly scaling an information security program.

• Experience as a strong cross-functional partner who negotiates trade-offs and cultivates a sustainable security culture across all departments to further security objectives while facilitating business results.

• Comprehensive knowledge across the security domains relevant to this role, with hands-on expertise in several areas such as product and application security, cloud security (AWS preferred), AI security, security operations and incident response, and governance, risk, and compliance (GRC).

• Experience leading or closely collaborating with internal IT/technology operations, including endpoint management and supporting a remote-first workforce.

• Proficient in security and risk frameworks like NIST CSF 2.0 and the NIST AI RMF, with experience in leading and managing both internal and external assessments.

• Ability to identify, quantify, and articulate security risks, develop action plans, and drive them to successful completion.

• Excellent communication skills and executive presence: capable of translating complex security and technology issues into business outcomes for technical teams, executives, and other stakeholders.

• Experience working within a matrixed, parent-company, or shared-services security model is advantageous.

• Familiarity with securing consumer (B2C) platforms, particularly those aimed at minors, along with an understanding of related privacy and youth safety considerations, is a plus.

🏝️ Benefits

• Work remotely across the US* or from our modern, well-equipped office in Manhattan, NY.

• Unlimited vacation policy.

• Paid volunteer opportunities.

• Technology stipend of $4,000 every two years after your start date to ensure you have the latest and most effective technology.

• Work-from-home stipend of $500 annually to enhance your home office environment.

• Monthly stipends for physical, mental, wellness, and learning opportunities offered through Holisticly.

• Monthly lifestyle stipend provided by Fringe.

• Comprehensive health benefits including medical, dental, vision, prescription, FSA, HRA, HSA, and coverage for family/dependents.

• Retirement savings options, including Traditional and Roth 401K plans through Vanguard, accompanied by an immediate company match.

• Life insurance coverage, including basic life, supplemental life, and dependent life.

• Disability leave, with both short-term and long-term disability options available.

• Company-paid parental leave of up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents.

• Family-building benefits through Progyny.

• Teammate discount at DICK'S Sporting Goods and their family of brands.