Director of IT & Security

Summary

Join PrizePicks, a rapidly growing sports company, as their Director of IT and Security. This leadership role requires overseeing enterprise IT operations and corporate security initiatives, leading a team of IT and Security Managers. You will develop and execute the company's IT and Security strategy, manage IT systems and network architecture, and design robust security operations programs. The position also involves leading audits, ensuring compliance, and developing business continuity plans. You will proactively identify and assess risks, implement risk management frameworks, and report on key performance indicators. Finally, you will build and mentor a high-performing team of IT and Security professionals.

Requirements

• 8–12+ years of experience in IT and/or Security roles, with 3+ years in a leadership capacity
• Proven experience managing both IT and Security functions in a high-growth or mid-sized company
• Ability to manage multiple priorities and projects in a fast-paced, dynamic environment
• Demonstrated ability to identify, analyze, and articulate technology and security risks in business terms to non-technical stakeholders and executive leadership
• Strong understanding of modern SaaS environments, device management, identity management (IAM, MDM), GRC, and security frameworks
• Collaborative, hands-on leader with strong communication and cross-functional alignment skills

Responsibilities

• Develop and execute the company's IT and Security strategy, aligning it with business goals and ensuring the secure and efficient operation of all technology systems
• Own the roadmap for corporate IT systems, network architecture, device management, identity and access management, and IT service desk
• Design, implement, and manage robust security operations programs covering threat intelligence, application security, vulnerability management, penetration testing, security monitoring, incident response, and employee security awareness training
• Establish and maintain a strong security posture by partnering closely with Engineering, Legal, HR, Compliance, and other business units to embed security best practices and access controls throughout the organization's systems and processes
• Lead and manage internal and external audits (financial, security, and regulatory) and oversee security certification programs (e.g., SOC 2, ISO 27001, and potentially gaming-specific certifications), ensuring continuous compliance and successful audits
• Develop, maintain, and regularly test comprehensive business continuity and disaster recovery plans to ensure minimal disruption to business operations in the event of unforeseen incidents
• Proactively identify, analyze, and assess technology and security-related business risks, including but not limited to, cyber threats, data breaches, regulatory non-compliance, and system failures
• Develop and implement risk management frameworks and policies to govern technology and security practices across the organization
• Define, track, and report on key performance indicators (KPIs) for the IT and Security teams, driving a culture of accountability, continuous improvement, and operational excellence
• Oversee relationships with key technology vendors, ensuring service level agreements are met and value is maximized
• Stay current with emerging technology trends, security threats, and regulatory changes impacting the sports gaming industry and advise the business on necessary adaptations
• Build, mentor, and lead a high-performing team of IT and Security professionals

Preferred Qualifications

• Experience working in a hybrid or remote-first company
• Background in scaling internal IT during hyper-growth
• CISSP, CISM, ITIL, or other relevant certifications

Benefits

• Company-subsidized medical, dental, & vision plans
• 401(k) plan with company match
• Annual bonus
• Flexible PTO to encourage a healthy work/life balance (2 weeks STRONGLY encouraged!)
• Generous paid leave programs, including 16-week paid parental leave and disability benefits
• Workplace flexibility and modern work schedules focused on getting the job done, not hours clocked
• Company-wide in-person events and team outings
• Lifestyle enhancement program
• Company equipment provided (Windows & Mac options)
• Annual performance reviews with opportunities for growth and career development