Director, Information Security & Technology

About GameChanger: We believe in the life changing impact youth sports have on and off the field. Sports encourage leadership, teamwork, responsibility, and confidence – important life lessons that have the power to propel our youth toward meaningful futures. We recognize that without coaches, parents, and volunteers, organized youth sports could not exist. By building the first and best place to experience the youth sports moments important to our community, we are helping families elevate the next generation through youth sports. So if you love sports and their community building potential, or building cool products is your sport, GameChanger is the team for you. We are a remote-first, dynamic tech company based in New York City, and we are solving some of the biggest challenges in youth sports today. The Position: GameChanger's Information Security and Technology organization protects the products, systems, and data that the families, coaches, and young athletes who rely on us trust us with every day, and keeps the internal technology our employees depend on running smoothly. We treat security and technology as business enablers - our role is to help GameChanger move fast and grow safely. As Director of Information Security and Technology, you will own the strategy, team, and multi-year roadmap across Information Security and IT Operations. You will lead a multidisciplinary organization responsible for product and application security, cloud security, AI security, security operations, vulnerability management, governance, risk, compliance, and internal technology support. You will lead through managers, set technical and organizational direction, and partner closely with Engineering, Product, Legal, People, Finance, executive leadership, and teams across the business to embed security and sound technology practices into how GameChanger operates. GameChanger is a subsidiary of Dick's Sporting Goods (DSG). You will represent GameChanger security within DSG, partnering with the DSG CISO and enterprise security organization to align tooling and processes while retaining ownership and autonomy of Security and Operations for GameChanger’s environment. You will report to the Senior Director of Engineering at GameChanger. What You'll Do: Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership. Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership. Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions. Evaluate and mitigate risks across infrastructure, product, and corporate environments. Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company. Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership. Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function. Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work. Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO. Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives. Educate and influence the broader company on security principles, threats, and practices. What You'll Bring: 10+ years of progressive experience in security, including direct people management experience leading managers and multidisciplinary security teams. A track record of building or significantly scaling an information security program. Experience acting as a strong cross-functional partner who negotiates tradeoffs and builds a durable security culture across all departments to advance security goals while enabling business results. Breadth across the security domains this role covers, with hands-on depth in several of: product and application security, cloud security (AWS preferred), AI security, security operations and incident response, and GRC. Experience leading or closely partnering with internal IT / technology operations, including endpoint management and supporting a remote-first workforce. Fluency with security and risk frameworks such as NIST CSF 2.0 and the NIST AI RMF, and experience leading and managing internal and external assessments. The ability to identify, quantify, and articulate security risk, build action plans, and drive them to completion. Excellent communication skills and executive presence: you can translate complex security and technology topics into business outcomes for technical teams, executives, and other stakeholders. Experience operating within a matrixed, parent-company, or shared-services security model is a plus. Experience securing consumer (B2C) platforms, particularly products serving minors, and familiarity with the associated privacy and youth-safety considerations, is a plus. Perks: Work remotely throughout the US* or from our well-furnished, modern office in Manhattan, NY. Unlimited vacation policy. Paid volunteer opportunities. Technology stipend - $4,000 every 2 years after your start to make sure you have the latest and greatest technology. WFH stipend - $500 annually to make your WFH situation comfortable. Monthly physical, mental, wellness & learning stipend offered through Holisticly. Monthly lifestyle stipend offered through Fringe. Full health benefits - medical, dental, vision, prescription, FSA, HRA, HSA, and coverage for family/dependents. Retirement savings - Traditional and Roth 401K plans are offered through Vanguard, with an immediate company match. Life insurance - basic life, supplemental life, and dependent life. Disability leave - short-term disability and long-term disability. Company paid parental leave - up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents. Family building benefits offered through Progyny. DICK'S Sporting Goods and their family of brands teammate discount. The target salary range for this position is between $220,000 and $240,000. This is part of a total compensation package that includes incentive, equity, and benefits for eligible roles. Individual pay may vary from the target range and is determined by several factors including experience, internal pay equity, and other relevant business considerations. We constantly review all teammate pay to ensure a great compensation package that is fair and equal across the board. * DICK'S Sporting Goods has company-wide practices to monitor and protect the company from significant compliance and monetary implications as it pertains to employer state tax liabilities. Due to said guidelines put in place, we are unable to hire in AK, DE, HI, IA, LA, MS, MT, OK, and SC. We are an equal opportunity employer and value diversity in our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. IMPORTANT NOTICE: All official recruitment communications from GameChanger will come from an email address ending in @gc.com or View email address on click.appcast.io. If you receive communication from any other domain, please be cautious, as it is likely fraudulent.