Director, Information Security & Technology

Role overview A remote-first, Director-level opportunity to own the multi-year Information Security and Technology strategy for a consumer platform serving young athletes, families, and coaches. Information Security is the primary focus, with IT Operations oversight, and the leader also operates as a Business Information Security Officer partnering with a parent-company enterprise security organization. The role sets technical and organizational direction, makes investment and prioritization calls, and leads through managers while staying close enough to the work to challenge assumptions.

Responsibilities - Define and evolve a multi-year Information Security and Technology roadmap covering priorities, investments, tooling, resourcing, and risk. - Set direction for Product and Application Security in partnership with Engineering and Product to embed security across architecture, development, and the SDLC. - Lead and develop managers, senior engineers, and technology professionals with clear accountability and ownership expectations. - Own the security operations and incident response program, including detection, on-call, escalation, and coordination with parent-company security. - Run the governance, risk, and compliance program, including internal assessments against frameworks like NIST CSF 2.0 and clear executive reporting. - Make pragmatic, risk-based trade-offs between security posture and product velocity, deciding when to remediate, mitigate, or accept risk. - Set direction for AI security and governance, including secure adoption of AI tooling and responsible use of AI-enabled product features. - Oversee internal Technology operations covering identity and access, endpoints, employee technology, and support for a remote-first workforce.

Requirements - Significant experience leading Information Security programs at scale across multiple domains, including Product and Application Security, cloud security, security operations, vulnerability management, and GRC. - Demonstrated ability to lead through managers and senior technical staff, with executive presence and strong communication skills. - Track record of making risk-based decisions that balance security with business velocity. - Experience partnering across Engineering, Product, and senior leadership to embed security into product development. - Hands-on familiarity with at least one major cloud provider environment; deep IT practitioner experience is not required.

Nice to have - Experience operating in a matrixed, parent-company, or shared-services security model. - Familiarity with cloud-native AWS environments. - Background with security and risk frameworks such as NIST CSF 2.0 and the NIST AI RMF. - Experience with AI security or AI governance initiatives. - Experience securing consumer-facing products, especially those serving minors, including privacy and youth-safety considerations. - Experience leading distributed or remote-first teams.

Benefits and work setup - Remote-first within the contiguous US, or hybrid from a modern Manhattan office. - Unlimited vacation, paid volunteer opportunities, technology and WFH stipends, and monthly wellness and lifestyle stipends. - Full medical, dental, vision, prescription, FSA, HRA, and HSA coverage with family and dependent options. - Traditional and Roth 401(k) plans with an immediate company match, plus life and disability coverage. - Generous paid parental leave and family-building benefits. - Target salary range of $220,000–$240,000, plus incentive and equity as part of total compensation.