DIRECTOR, INFORMATION SECURITY

Job Title: Director, Information Security

Department: Information Technology

Reports to: Vice President, Stadium Technology

Classification: Exempt

Position Summary

The Director of Information Security is primarily responsible for providing leadership, including operational and tactical direction regarding information security matters. The Director of Information Security assists the VP of Stadium Technology to define and execute the organization's information security program comprising information security, governance, risk management, and compliance.

Essential Functions

• Responsible for providing high level of customer service to both NFL teams, maintaining absolute neutrality on all team issues and protecting confidentiality of each teams information
• Communicates effectively (oral and in writing) with NMS management, ownership and other stakeholders
• Analyzes technologies and establishes processes, procedures, and protocols to prevent unauthorized access to company networks, systems, and data
• Assists the IT team in Installing, administering, and troubleshooting network security solutions
• Develop the vulnerability and patch management process to assist the IT team systematically ensure vulnerabilities are addressed based on criticality, risk and impact to the business and each resource.
• Assists the IT team in configuring and supporting security and recovery tools, such as EDR, SIEM, CMDB, etc.
• Ensures the company's information security program complies with all applicable NFL and regulatory requirements and privacy laws (PCI, HIPAA, GDPR, etc.)
• Facilitates third-party audit reviews, penetration tests, and risk assessments
• Lead security-related projects from inception to successful completion and assists in department training
• Stays abreast of the security industry threat landscape, specifically within professional sports, in general, and professional football, in particular

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The ideal candidate would:

• Have 5+ years of experience in an information security role. Advanced degrees or certificates in computer science, cyber security, networking, or related field are preferred but not required.
• A strong understanding and knowledge of computer, network, and security systems
• Have subject matter expertise in information security, governance, risk management, and compliance

• Demonstrate solid organizational skills and the ability to multi-task, prioritize workloads, and delegate responsibilities.
• Effectively manage stress in a constantly changing environment.
• Demonstrate excellent judgment and the ability to make quick decisions and think outside the box when working with complex situations.
• Possesses a high level of integrity, trustworthiness, and confidence and represents the company at the highest level of professionalism
• Demonstrate strong analytical skills and effectively interprets and applies applicable regulations and requirements
• Knowledge and Familiarity with:
  • Common security frameworks
  • Microsoft Active Directory
  • Cloud Computing - Microsoft 365, Azure and AWS
  • Network Security - Architecture, SIEM, IDS, and Firewalls
  • Anti-virMDR/EDR solutions
  • Data Loss Prevention
  • Experience with Information Security Controls & Governance, Risk Management and Compliance

Physical Demands:

• Position requires the ability to stand, walk, sit, use hands to handle, or feel, reach with hands and arms, twist, turn and climb stairs
• Position requires the ability to work independently and in a group environment
• Position requires the ability to lift and/or move up to 50 pounds

Work Environment:

• Employee will be required to work days, nights, weekends, and holidays due to the unique stadium schedule
• The noise level in the work environment is usually moderate, however, during events the noise level may be loud

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.