Director, Cybersecurity

ABOUT VICTORY LIVE Victory Live is a private equity backed technology company aimed at maximizing distribution and yield for live event ticket inventory. We provide an end-to-end software platform for the live ticketing industry, managing thousands of sports, theater, and live music event tickets on behalf of artists, promotors, teams, venues and professional resellers. Victory Live’s comprehensive offerings include an established B2B marketplace along with both a full-service and an automated SaaS platform to manage all elements of the ticket sales lifecycle, from ingestion to sales fulfillment. THE POSITION Victory Live is seeking a Director of Cybersecurity that is responsible for safeguarding our organization's information systems by overseeing cybersecurity policies, procedures, and technologies. This position focuses on the prevention, detection, and response to cyber threats, ensuring the organization's infrastructure, applications, and data are protected from breaches or attacks. The role involves building and leading a small offshore cybersecurity team, managing security programs, and aligning security initiatives with business goals. The role requires a balance of hands-on technical expertise and managerial skills to implement and maintain the security posture of the organization. THE PLAN Cybersecurity Strategy and Leadership : Develop, implement, and maintain the organization’s cybersecurity strategy and frameworks. Ensure cybersecurity initiatives align with business objectives and regulatory requirements. Provide leadership and direction to the cybersecurity team, ensuring effective execution of security projects and programs. Risk Management and Threat Assessment : Oversee the identification, assessment, and mitigation of cybersecurity risks. Conduct regular risk assessments and vulnerability analyses to identify potential threats. Collaborate with other departments to minimize security risks across the organization. Incident Response and Forensics : Lead the organization's incident response efforts, including detection, containment, eradication, and recovery from cybersecurity incidents. Oversee forensic investigations following security breaches to determine root causes and prevent future incidents. Develop and update the incident response plan, ensuring that the team is prepared to respond to various security events. Security Operations Management : Supervise daily cybersecurity operations, including threat monitoring, vulnerability management, and security information and event management (SIEM). Ensure the proper configuration and management of security technologies such as firewalls, intrusion detection systems, and endpoint protection. Lead regular penetration testing, vulnerability assessments, and audits to ensure a robust security posture. Security Policy Development and Compliance : Develop and enforce cybersecurity policies, standards, and procedures in line with industry best practices and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS). Ensure ongoing compliance with internal policies and external regulations through audits and continuous monitoring. Manage security awareness programs to educate employees on security best practices and organizational policies. Collaboration and Stakeholder Engagement : Work closely with IT, legal, risk management, and other departments to ensure holistic security coverage. Function as the primary point of contact for external security audits, assessments, and regulatory reviews. Provide cybersecurity reports and insights to executive leadership, helping inform strategic decisions. Requirements Experience : 8 years of experience in cybersecurity, with at least 3 years in a leadership or managerial role. Experience managing incident response, security operations, threat hunting, and compliance programs. Demonstrated expertise in managing cybersecurity tools (e.g., SIEM, Email security tools, Endpoint security tools, DLP, Cloud). Technical Expertise : Strong understanding of network security, cloud security, email, and endpoint protection. Knowledge of various security frameworks (NIST, ISO 27001) and compliance standards (e.g., SOX, HIPAA). Proficiency in risk assessment methodologies, penetration testing, and vulnerability management. Certifications (preferred): CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CEH (Certified Ethical Hacker) Other industry-recognized certifications like GIAC or OSCP. Leadership and Management : Proven experience leading and mentoring cybersecurity professionals. Strong organizational and project management skills with the ability to manage multiple initiatives. Excellent communication and people skills, with the ability to engage with stakeholders across the business. Victory Live is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, Veteran status, or another other characteristic protected by state, local or federal law.