The Position:

GameChanger's Information Security & Technology organization protects the products, systems, and data that the families, coaches, and young athletes who rely on us trust us with every day, while keeping the internal technology our employees depend on running smoothly. We treat security and technology as business enablers: our role is to help GameChanger move fast and grow safely.

As Director of Information Security & Technology, you will own the strategy, team, and multi-year roadmap across Information Security and IT Operations. Information Security is the primary focus of this role. We're looking for a well-rounded security leader with the technical credibility to lead across Product and Application Security, cloud security, security operations and incident response, vulnerability management, GRC, and emerging areas like AI security, while overseeing our internal Technology function.

This is a Director-level leadership role where you'll set organizational and technical direction, make investment and prioritization decisions, and lead through managers and experienced technical teammates. We're a lean organization, so you'll stay close enough to the work to guide difficult decisions and challenge assumptions, but we don't expect you to be the deepest technical expert in every domain you lead.

GameChanger is a subsidiary of DICK'S Sporting Goods (DSG). You will operate in a Business Information Security Officer (BISO) capacity, partnering with the DSG CISO and enterprise security organization to align tooling and processes while retaining ownership and autonomy of Security and Operations for GameChanger's environment. You will report to the Senior Director of Engineering at GameChanger.

What You'll Do:

• Own and evolve GameChanger's multi-year Information Security and Technology strategy, including priorities, investments, tooling, resourcing, and risk, aligned to business and parent-company goals.
• Set the direction for Product and Application Security, partnering closely with Engineering and Product to embed security throughout architecture, development, and the software development lifecycle.
• Lead and develop managers, senior engineers, and technology professionals, setting clear expectations and accountability while empowering your team to own execution and grow their impact.
• Provide strategic leadership across cloud security, vulnerability management, and the broader Information Security program, ensuring our capabilities evolve as GameChanger grows.
• Own our security operations and incident response program, including detection, on-call, escalation, and coordination with our parent-company security function.
• Lead our governance, risk, and compliance program, including internal assessments such as NIST CSF 2.0, external assessments, risk management, and clear reporting to leadership.
• Make pragmatic, risk-based decisions that balance security with product velocity and business needs, including determining when risks should be remediated, mitigated, or thoughtfully accepted.
• Set direction for AI security and governance, including the secure adoption of AI tooling, security of AI-enabled product features, and responsible AI usage, partnering with AI enablement and governance stakeholders across the company.
• Oversee internal Technology operations, including identity and access, endpoints, employee technology, and support for our remote-first workforce.
• Serve as GameChanger's BISO and primary partner to the DSG CISO and enterprise security organization, establishing clear decision rights, aligning on shared tooling and processes, and advocating for GameChanger's needs.
• Lead the cross-functional security steering committee and represent Security and Technology in executive forums, communicating priorities, risks, investments, and tradeoffs to technical and nontechnical audiences.
• Educate and influence the broader organization on security principles, emerging threats, and practices, building a security culture that enables teams to move quickly and safely.

What You Bring

• 10+ years of progressive experience in Information Security, including meaningful people-management experience leading managers, senior technical leaders, or multidisciplinary security teams.
• Broad Information Security leadership experience, with meaningful depth in Product and Application Security and experience partnering directly with software Engineering teams to embed security throughout the development lifecycle.
• A track record of building, scaling, or significantly evolving an Information Security program and translating organizational risk into a clear strategy and multi-year roadmap.
• Experience setting organizational direction and making prioritization, investment, tooling, and resourcing decisions rather than solely managing day-to-day execution.
• Broad knowledge across cloud security, security operations and incident response, vulnerability management, and GRC. We don't expect deep practitioner-level expertise in every domain you lead.
• Strong security judgment and the ability to evaluate technical risk in business context, navigate tradeoffs, make clear recommendations, and drive decisions to completion.
• A track record of building durable partnerships across Engineering, Product, Legal, executives, and other cross-functional teams, including navigating disagreement and influencing without relying solely on authority or escalation.
• Experience developing strong technical talent, managing performance, and creating accountability while giving experienced teammates autonomy to own their domains.
• Experience leading or closely partnering with internal IT / Technology Operations, including identity and access, endpoint management, and employee technology. Deep IT practitioner experience is not required.
• Excellent communication skills and executive presence, with the ability to translate complex security and technology topics into clear business implications for technical teams, executives, and other stakeholders.

Nice to Have:

• Experience operating within a matrixed, parent-company, or shared-services security model.
• Experience with AWS and cloud-native software environments.
• Experience with security and risk frameworks such as NIST CSF 2.0 and/or the NIST AI RMF.
• Experience with AI security or AI governance.
• Experience securing consumer-facing products, particularly products serving minors, and familiarity with associated privacy and youth-safety considerations.
• Experience leading distributed or remote-first teams.

Perks:

• Work remotely throughout the US* or from our well-furnished, modern office in Manhattan, NY.
• Unlimited vacation policy.
• Paid volunteer opportunities.
• Technology stipend - $4,000 every 2 years after your start to make sure you have the latest and greatest technology.
• WFH stipend - $500 annually to make your WFH situation comfortable.
• Monthly physical, mental, wellness & learning stipend offered through Holisticly.
• Monthly lifestyle stipend offered through Fringe.
• Full health benefits - medical, dental, vision, prescription, FSA, HRA, HSA, and coverage for family/dependents.
• Retirement savings - Traditional and Roth 401K plans are offered through Vanguard, with an immediate company match.
• Life insurance - basic life, supplemental life, and dependent life.
• Disability leave - short-term disability and long-term disability.
• Company paid parental leave - up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents.
• Family building benefits offered through Progyny.
• DICK'S Sporting Goods and their family of brands teammate discount.

The target salary range for this position is between $220,000 and $240,000. This is part of a total compensation package that includes incentive, equity, and benefits for eligible roles. Individual pay may vary from the target range and is determined by several factors including experience, internal pay equity, and other relevant business considerations. We constantly review all teammate pay to ensure a great compensation package that is fair and equal across the board.

* DICK'S Sporting Goods has company-wide practices to monitor and protect the company from significant compliance and monetary implications as it pertains to employer state tax liabilities. Due to said guidelines put in place, we are unable to hire in AK, DE, HI, IA, LA, MS, MT, OK, and SC.