Director of IT & Security

This role will be responsible for overseeing enterprise IT operations and corporate security initiatives. You’ll lead a team that includes IT and Security Managers and play a critical role in shaping our technology operations and risk posture. This is both a strategic and hands-on leadership role.

• Develop and execute the company's IT and Security strategy, aligning it with business goals and ensuring the secure and efficient operation of all technology systems.
• Own the roadmap for corporate IT systems, network architecture, device management, identity and access management, and IT service desk.
• Design, implement, and manage robust security operations programs covering threat intelligence, application security, vulnerability management, penetration testing, security monitoring, incident response, and employee security awareness training.
• Establish and maintain a strong security posture by partnering closely with Engineering, Legal, HR, Compliance, and other business units to embed security best practices and access controls throughout the organization's systems and processes.
• Lead and manage internal and external audits (financial, security, and regulatory) and oversee security certification programs (e.g., SOC 2, ISO 27001, and potentially gaming-specific certifications), ensuring continuous compliance and successful audits
• Develop, maintain, and regularly test comprehensive business continuity and disaster recovery plans to ensure minimal disruption to business operations in the event of unforeseen incidents.
• Proactively identify, analyze, and assess technology and security-related business risks, including but not limited to, cyber threats, data breaches, regulatory non-compliance, and system failures.
• Develop and implement risk management frameworks and policies to govern technology and security practices across the organization.
• Define, track, and report on key performance indicators (KPIs) for the IT and Security teams, driving a culture of accountability, continuous improvement, and operational excellence.
• Oversee relationships with key technology vendors, ensuring service level agreements are met and value is maximized.
• Stay current with emerging technology trends, security threats, and regulatory changes impacting the sports gaming industry and advise the business on necessary adaptations.
• Build, mentor, and lead a high-performing team of IT and Security professionals.

• 8–12+ years of experience in IT and/or Security roles, with 3+ years in a leadership capacity.
• Proven experience managing both IT and Security functions in a high-growth or mid-sized company.
• Ability to manage multiple priorities and projects in a fast-paced, dynamic environment.
• Demonstrated ability to identify, analyze, and articulate technology and security risks in business terms to non-technical stakeholders and executive leadership.
• Strong understanding of modern SaaS environments, device management, identity management (IAM, MDM), GRC, and security frameworks.
• Experience with compliance frameworks such as SOC 2, ISO 27001, or HIPAA is a plus.
• Collaborative, hands-on leader with strong communication and cross-functional alignment skills.

• Experience working in a hybrid or remote-first company.
• Background in scaling internal IT during hyper-growth.
• CISSP, CISM, ITIL, or other relevant certifications.

• While we prefer candidates based in Atlanta, we are open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidates. #LI-Remote 

The typical salary range for this position is $200,000 to $250,000. At PrizePicks, we consider your role, level, and where you'll be working when determining our salary ranges. The compensation info you see on our job postings gives you an idea of the starting pay range for the position. Your actual pay within that range will depend on your specific work location, as well as your skills, experience, and education. Your recruiter will be happy to chat more about the specific pay range for your location and how we arrived at it during the hiring process. 

This application period will remain open for 30 days. We’re committed to finding the best candidate, so this date may be adjusted, and any changes will be reflected in this posting.

Date Posted:  May 29th, 2022