Director, Information Security & Technology

Own and evolve GameChanger’s multi-year Information Security and Technology strategy, including priorities, investments, tooling, resourcing, and risk, aligned to business and parent-company goals.

Set the direction for Product and Application Security, partnering closely with Engineering and Product to embed security throughout architecture, development, and the software development lifecycle.

Lead and develop managers, senior engineers, and technology professionals, setting clear expectations and accountability while empowering your team to own execution and grow their impact.

Provide strategic leadership across cloud security, vulnerability management, and the broader Information Security program, ensuring our capabilities evolve as GameChanger grows.

Own our security operations and incident response program, including detection, on-call, escalation, and coordination with our parent-company security function.

Lead our governance, risk, and compliance program, including internal assessments such as NIST CSF 2.0, external assessments, risk management, and clear reporting to leadership.

Make pragmatic, risk-based decisions that balance security with product velocity and business needs, including determining when risks should be remediated, mitigated, or thoughtfully accepted.

Set direction for AI security and governance, including the secure adoption of AI tooling, security of AI-enabled product features, and responsible AI usage, partnering with AI enablement and governance stakeholders across the company.

Oversee internal Technology operations, including identity and access, endpoints, employee technology, and support for our remote-first workforce.

Serve as GameChanger’s BISO and primary partner to the DSG CISO and enterprise security organization, establishing clear decision rights, aligning on shared tooling and processes, and advocating for GameChanger’s needs.

Lead the cross-functional security steering committee and represent Security and Technology in executive forums, communicating priorities, risks, investments, and tradeoffs to technical and nontechnical audiences.

Educate and influence the broader organization on security principles, emerging threats, and practices, building a security culture that enables teams to move quickly and safely.

10+ years of progressive experience in Information Security, including meaningful people-management experience leading managers, senior technical leaders, or multidisciplinary security teams.

Broad Information Security leadership experience, with meaningful depth in Product and Application Security and experience partnering directly with software Engineering teams to embed security throughout the development lifecycle.

A track record of building, scaling, or significantly evolving an Information Security program and translating organizational risk into a clear strategy and multi-year roadmap.

Experience setting organizational direction and making prioritization, investment, tooling, and resourcing decisions rather than solely managing day-to-day execution.

Broad knowledge across cloud security, security operations and incident response, vulnerability management, and GRC. We don’t expect deep practitioner-level expertise in every domain you lead.

Strong security judgment and the ability to evaluate technical risk in business context, navigate tradeoffs, make clear recommendations, and drive decisions to completion.

A track record of building durable partnerships across Engineering, Product, Legal, executives, and other cross-functional teams, including navigating disagreement and influencing without relying solely on authority or escalation.

Experience developing strong technical talent, managing performance, and creating accountability while giving experienced teammates autonomy to own their domains.

Experience leading or closely partnering with internal IT / Technology Operations, including identity and access, endpoint management, and employee technology. Deep IT practitioner experience is not required.

Excellent communication skills and executive presence, with the ability to translate complex security and technology topics into clear business implications for technical teams, executives, and other stakeholders.

Experience operating within a matrixed, parent-company, or shared-services security model.

Experience with AWS and cloud-native software environments.

Experience with security and risk frameworks such as NIST CSF 2.0 and/or the NIST AI RMF.

Experience with AI security or AI governance.

Experience securing consumer-facing products, particularly products serving minors, and familiarity with associated privacy and youth-safety considerations.

Experience leading distributed or remote-first teams.