Director of Information Security & Technology

GameChanger is a remote-first, dynamic tech company based in New York City, focused on solving challenges in youth sports. We believe in the transformative impact of sports on youth development, fostering leadership, teamwork, responsibility, and confidence.

About the Role:

GameChanger’s Information Security & Technology organization ensures the protection of products, systems, and data trusted by families, coaches, and athletes, while maintaining smooth internal technology operations. Security and technology are treated as business enablers, enabling GameChanger to grow safely.

As the Director of Information Security & Technology, you will:

• Own and evolve GameChanger’s multi-year Information Security and Technology strategy, including priorities, investments, tooling, resourcing, and risk management, aligned with business and parent-company goals.
• Set direction for Product and Application Security, collaborating closely with Engineering and Product teams to embed security throughout architecture, development, and the software development lifecycle.
• Lead and develop managers, senior engineers, and technology professionals, ensuring clear expectations and accountability while empowering teams to grow.
• Provide strategic leadership across cloud security, vulnerability management, and broader Information Security programs, ensuring capabilities evolve with GameChanger’s growth.
• Oversee security operations and incident response, including detection, on-call, escalation, and coordination with the parent-company security function.
• Lead the governance, risk, and compliance (GRC) program, including internal assessments like NIST CSF 2.0, external assessments, risk management, and reporting to leadership.
• Make pragmatic, risk-based decisions balancing security with product velocity and business needs, determining when risks should be remediated, mitigated, or accepted.
• Set direction for AI security and governance, including secure adoption of AI tooling, security of AI-enabled product features, and responsible AI usage.
• Oversee internal Technology operations, including identity and access management, endpoints, employee technology, and support for the remote-first workforce.
• Serve as GameChanger’s Business Information Security Officer (BISO) and primary partner to the DSG CISO and enterprise security organization, aligning tooling and processes while retaining autonomy.
• Lead the cross-functional security steering committee and represent Security and Technology in executive forums, communicating priorities, risks, investments, and trade-offs.
• Educate and influence the broader organization on security principles, emerging threats, and practices, fostering a security culture that enables teams to move quickly and safely.

Qualifications:

• 10+ years of progressive experience in Information Security, including meaningful people-management experience leading managers, senior technical leaders, or multidisciplinary security teams.

• Broad Information Security leadership experience, with meaningful depth in Product and Application Security and experience partnering directly with software Engineering teams to embed security throughout the development lifecycle.

• A track record of building, scaling, or significantly evolving an Information Security program and translating organizational risk into a clear strategy and multi-year roadmap.

• Experience setting organizational direction and making prioritization, investment, tooling, and resourcing decisions rather than solely managing day-to-day execution.

• Broad knowledge across cloud security, security operations and incident response, vulnerability management, and GRC. Deep practitioner-level expertise in every domain is not required.

• Strong security judgment and the ability to evaluate technical risk in a business context, navigate trade-offs, make clear recommendations, and drive decisions to completion.

• A track record of building durable partnerships across Engineering, Product, Legal, executives, and other cross-functional teams, including navigating disagreement and influencing without relying solely on authority or escalation.

• Experience developing strong technical talent, managing performance, and creating accountability while giving experienced teammates autonomy to own their domains.

• Experience leading or closely partnering with internal IT/Technology Operations, including identity and access, endpoint management, and employee technology.

• Excellent communication skills and executive presence, with the ability to translate complex security and technology topics into clear business implications for technical teams, executives, and stakeholders.

Nice to Have:

• Experience operating within a matrixed, parent-company, or shared-services security model.
• Experience with AWS and cloud-native software environments.
• Experience with security and risk frameworks such as NIST CSF 2.0 and/or NIST AI RMF.
• Experience with AI security or AI governance.
• Experience securing consumer-facing products, particularly those serving minors, and familiarity with associated privacy and youth-safety considerations.
• Experience leading distributed or remote-first teams.