Job Title: Director of Information Security
Reports To: Vice President of Stadium Technology
Department: Information Technology
Classification: Exempt
Job Overview: The Director of Information Security is primarily responsible for providing leadership, including operational and tactical direction regarding information security matters. The Director of Information Security assists the VP of Stadium Technology to define and execute the organization's information security program comprising information security, governance, risk management, and compliance.
Key Responsibilities: The key responsibilities of the Director of Information Security include, but are not limited to, the following:
- Analyzes technologies and establishes processes, procedures, and protocols to prevent unauthorized access to company networks, systems, and data
- Assists the IT team in Installing, administering, and troubleshooting network security solutions
- Develop the vulnerability and patch management process to assist the IT team systematically ensure vulnerabilities are addressed based on criticality, risk and impact to the business and each resource.
- Assists the IT team in configuring and supporting security and recovery tools, such as EDR, SIEM, CMDB, etc.
- Ensures the company's information security program complies with all applicable NFL and regulatory requirements and privacy laws (PCI, HIPAA, GDPR, etc.)
- Facilitates third-party audit reviews, penetration tests, and risk assessments
- Lead security-related projects from inception to successful completion and assists in department training
- Stays abreast of the security industry threat landscape, specifically within professional sports, in general, and professional football, in particular
Qualifications:
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The ideal candidate would:
- Have 5 years of experience in an information security role. Advanced degrees or certificates in computer science, cyber security, networking or related field are preferred but not required.
- A strong understanding and knowledge of computer, network, and security systems
- Have subject matter expertise in information security, governance, risk management, and compliance
- Demonstrate solid organizational skills and the ability to multi-task, prioritize workloads, and delegate responsibilities.
- Effectively manage stress in a constantly changing environment.
- Demonstrate excellent judgment and the ability to make quick decisions and think outside the box when working with complex situations.
- Possesses a high level of integrity, trustworthiness, and confidence and represents the company at the highest level of professionalism
- Demonstrate strong analytical skills and effectively interprets and applies applicable regulations and requirements
Experience:
- Knowledge and Familiarity with common security frameworks
- Microsoft Active Directory
- Cloud Computing -Microsoft 365, Azure and AWS
- Network Security - Architecture, SIEM, IDS, and Firewalls
- Anti-virMDR/EDR solutions
- Data Loss Prevention
- Experience with Information Security Controls & Governance, Risk Management and Compliance
Work Environment:
- Employee will be required to work days, nights, weekends, and holidays due to the unique stadium schedule
- The noise level in the work environment is usually moderate, however, during events the noise level may be loud
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job
Job Type: Full-time
Salary: $120,000.00 - $140,000.00 per year (Commensurate with Experience)