Company Information
For more than 20 years, AEG has played a pivotal role in transforming sports and live entertainment. Annually, we host more than 160 million guests, promote more than 10,000 shows and present more than 22,000 events around the world. We are committed to innovation, artistry, and community, and leverage the power of our 300+ venues, leading sports franchises, marquee music brands, integrated entertainment districts, premier ticketing platform and global sponsorship activations, to create memorable moments that give the world reason to cheer.
Our business is interwoven with the human mind and heart, and we strive to build a diverse and inclusive company that reflects the artists, athletes, and fans that we host; reach beyond traditional boundaries to support the communities in which we operate; and minimize our impact on the environment by adopting sustainable practices throughout our business operations.
If you want to be challenged to up your game and make a difference, then join us in giving the world reason to cheer!
Job Summary
The Chief Information Security Officer will be responsible for establishing and maintaining a company-wide information security program by establishing and maintaining a company-wide vision, strategy and architecture. This will include establishing, maintaining and monitoring the security related policies and procedures which promote the secure and uninterrupted operation of all information systems. The Chief Information Security & Compliance also oversees all strategic technology functions of the Employee Services organization. This role oversees a team of technology professionals dedicated to maintaining and delivering all human capital system functions and the integration and use of those systems across the enterprise.
Essential Functions
- Direct and approve the design of security systems; ensure compliance with the changing laws and applicable regulations
- Ensure that disaster recovery and business continuity plans are in place and tested;
- Review and approve security policies, controls and cyber incident response planning
- Approve identity and access policies
- Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities
- Maintain a current understanding of the IT threat landscape for the industry; translate that knowledge to identification of risks and actionable plans to protect the business
- Oversee identity and access management (include scheduling of periodic security audits);
- Establish communication strategy and enforcement of cyber security policies and procedures across the organization
- Manage all teams, employees, contractors and vendors involved in IT security and HRIS, which may include hiring; provide training and mentoring to team members
- Constantly update the cyber security strategy to leverage new technology and threat information
- Brief the executive team on status and risks, including taking the role of champion for the overall strategy and necessary budget
- Communicate best practices and risks to all parts of the business, outside IT
- Direct and approve the design of HR systems and the integration of those systems across the enterprise
- Communicate and engage with Employee Services (ES) leadership to better understand business needs and action those requirements on behalf of the ES team.
- Constantly update the HRIS strategy to leverage new technology and new business functions
Qualifications
- BA/BS Degree (4-year) (Advanced Degree Preferred) In Information Technology or a related technical area
- Master Degree in related field Preferred
- 10+ years Related experience
- At least 5 years in a senior leadership role
- Experience in a combination of risk management, information security and IT jobs
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences
- Must be a critical thinker, with strong problem-solving skills
- Knowledge and understanding of relevant legal and regulatory requirements, such as Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry/Data Security Standard Personally Identifiable Information (PII).
- Strong project management, financial/budget management, scheduling and resource management skills
- Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals
- Demonstrated ability to overcome obstacles and deliver assignments on-time and with high quality
- Must be able to envision and articulate a compelling future for the business and to present and discuss strategies and technical information in a matter that establishes rapport, persuades others, and establishes understanding—for both technical and nontechnical audiences.
- Ability to combine strategic business and technical direction and translate concepts into actionable implementation plans.
- CISSP Certified Information Systems Security Professional Certification as a Certified Information Systems Security Professional (CISSP) and/or Systems Security Certified Practitioner (SSCP) Preferred.
Payscale: $340,000 - $360,000
AEG reserves the right to change or modify the employee’s job description whether orally or in writing, at any time during the employment relationship. AEG may require an employee to perform duties outside their normal description.
