Sr. Director, Information Security - Fanatics New York - New York Bookmark Share Print 136 0 1

Listing Description

Company Overview

Fanatics is building a leading global digital sports platform to ignite and harness the passions of fans and maximize the presence and reach for hundreds of partners globally. Optimizing these long-standing partnerships, a database of more than 80 million global consumers and a trusted, recognizable brand name, Fanatics is expanding beyond its position as a global leader for licensed sports merchandise to now becoming a next-gen digital sports platform, featuring an array of offerings for fans across the sports ecosystem.

The Fanatics family of companies currently includes Fanatics Commerce, a vertically-integrated licensed merchandise business that has changed the way fans purchase their favorite team apparel, jerseys, headwear and hardgoods through a tech-infused approach to making and quickly distributing fan gear in today’s 24/7 mobile-first economy; Candy Digital, a digital collectibles company that is partnering with prominent sports properties, including MLB and MLBPA, to build an official NFT ecosystem; Fanatics Collectibles, a transformative company that is building a new model for the hobby and giving collectors an end-to-end collectibles experience; and Fanatics Betting & Gaming, a mobile betting, gaming and retail sportsbook platform. Additional ventures that will build out Fanatics’ footprint across the broader digital sports landscape will be rolled out soon. Fanatics’ partners include all major professional sports leagues (NFL, MLB, NBA, NHL, NASCAR, MLS, PGA) and hundreds of collegiate and professional teams, which include several of the biggest global soccer clubs.

As a market leader with more than 8,000 employees, and hundreds of partners, suppliers, and vendors worldwide, we take responsibility for driving toward more ethical and sustainable practices. We are committed to building an inclusive Fanatics community, reflecting and representing society at every level of the business, including our employees, vendors, partners and fans. Fanatics is also dedicated to making a positive impact in the communities where we all live, work, and play through strategic philanthropic initiatives.

At Fanatics, we’re a diverse, passionate group of employees aiming to ignite pride and passion in the fans we outfit, celebrate and support. We recognize that diversity helps drive and foster innovation, and through our IDEA program (inclusion, diversity, equality and advocacy) at Fanatics we provide employees with tools and resources to feel connected and engaged in who they are and what they do to support the ultimate fan experience.

Summary:

The Sr. Director of Information Security (FHI) reports to the Chief Information Security Officer of FHI and will lead efforts in assessing Cyber risks to our business technology platforms and in building and maturing our identity and access management programs across an array of business applications. The Sr. Director will help to strengthen and mature FHI’s defensive posture, and that of its subsidiaries, to protect its proprietary data and systems from internal and external threats.

The Sr. Director is also responsible for proactively protecting information assets from unauthorized or inappropriate access, throughout our M&A processes and assisting with such transitions to ensure a secure design and integration is achieved for new subsidiaries. The Sr. Director will also work closely with our subsidiary security teams to participate in SOX compliance initiatives aimed at reducing cybersecurity risks across our evolving technology landscape.

What You'll Do:

Duties and responsibilities may include:

Develops an understanding of FHI’s current and forward-looking threat profile using requirements to improve the FHI Information Security Program.

Responsible for assessing and managing cyber risk profiles for our subsidiaries and new acquisitions, specifically around Identity and Access Management and SOX compliance for business systems.

Responsible for partnering with subsidiary Information Security teams to improve security of our business cloud services platforms.

Partners with FHI and its subsidiaries to identify and remediate gaps in our security posture, including within new or emerging technologies.

Partners with Operational Technology teams to identify improvement areas to reduce likelihood of impact from Cybersecurity risks such as ransomware in our environments through strong Identity and Access Management controls.

Strong command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies

Cybersecurity expert, keeping technical skills current and participating in multiple security forums and communities

Responsible for external engagement with peer groups and information security circles regarding cyber threats, to address events such as intrusions, malware, DDoS, unauthorized access, insider attacks and loss of proprietary information; this includes developing a deep understanding of global threat actors

Ability to identify indicators of compromise, network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation

Responsible for development of defined operational, tactical and strategic Information Security metrics

Candidate will ensure that Threat Models are understood and adopted and will develop and maintain metrics for Threat Models

Protects valuable information and maintains the confidentiality and integrity of data through:

Knowledge of IAM, security management, network & protocols, data and application security solutions

Knowledge of industry trends and current and emerging risks

Provides expertise, guidance and advice related to all information security issues.

What We're Looking For:

Bachelor’s degree in Information Security, Computer Science, Information Management Systems, or related field required. Master’s degree preferred.

Certificates as an CISSP, CISM, CRISC or equivalent certification preferred. May substitute an equivalent combination of education, experience, and other relevant industry certifications.

15+ years of progressive Information Security experience in a combination of Information Security, Information Technology, and Incident Response roles. At least 5 years must be supporting Identity and Access Management security projects and SOX Compliance initiatives.

Experience with Salesforce security preferred.

Clear experience & success negotiating competing demands across a variety of stakeholder groups

Ability to work collaboratively in teams and develop meaningful relationships to achieve common goals

Experience protecting aspects of an ERP systems and HR systems.

Expertise in Information Security best practices and implementing Information Security Architectures.

Detailed knowledge of global cyber threats, threat actors and the tactics, techniques and procedures used by cyber adversaries; demonstrated understanding of threat modeling techniques, in a cyber intelligence or cyber operations environment

Experience in regulatory requirements for public companies and ability to effectively apply risk principles to challenging business situations.

Impeccable presentation and communication skills.

Global experience preferred.

Ensure your Fanatics job offer is legitimate and don’t fall victim to fraud. Fanatics never seeks payment from job applicants. Fanatics recruiters will only reach out to applicants from an @fanatics.com or @fanatics.co.uk email address. For added security, where possible, apply through our company website at www.fanaticsinc.com/careers

Tryouts are open at Fanatics! Our team is passionate, talented, unified, and charged with creating the fan experience of tomorrow. The ball is in your court now.

Fanatics is committed to responsible planning and purchasing (RPP) practices, working with its business partners across its global and multi-layered supply chain, to ensure that planning, sourcing, and purchasing decisions, along with other supporting processes, do not impede or conflict with the fulfillment of Fanatics’ fair labor practices.

NOTICE TO CALIFORNIA RESIDENTS/APPLICANTS: In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we collect include your name, government issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, criminal record, and demographic information. We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or other types of positions, recordkeeping in relation to recruiting and hiring, conducting criminal background checks as permitted by law, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies.

Listing Details

Citizenship: Not Provided
Incentives: Not Provided

Education: Not Provided
Travel: Not Provided
Telework: Not Provided

Listing Description

Listing Details

About Us

Useful Links

Our Contacts