VP, Cybersecurity Operations & Architecture

Leads the design, operation and continuous improvement of cybersecurity capabilities across a global technology ecosystem, reporting directly to the Chief Information Security Officer. It integrates enterprise security architecture with cyber defence, incident response, threat detection and infrastructure protection, and sets standards for arena cybersecurity. The position partners extensively with internal technology, legal, privacy, compliance, basketball and media teams, NBA teams, arena operators and external technology partners.

• Develop and execute an integrated multi-year cybersecurity operations and architecture strategy aligned with business priorities, technology roadmaps, risk tolerance and the evolving threat landscape
• And lead and mature the Cybersecurity Operations and Cybersecurity Architecture functions with clear accountability, decision rights, service models, performance expectations and escalation paths.
• Establish and maintain enterprise cybersecurity architecture strategy, roadmap, standards, design patterns and reference architectures across cloud, applications, infrastructure, identity, data platforms, media operations, arena technologies, operational technology
• Data centres and third-party integrations, and lead security architecture reviews for major technology initiatives with pragmatic guidance balancing cyber risk, operational realities, resiliency, performance, cost and business objectives.
• Direct enterprise security operations, including continuous monitoring, threat detection, threat hunting, incident triage, containment, investigation, recovery coordination and post-incident improvement, and establish incident response roles, severity criteria, escalation protocols
• Executive communications, evidence handling expectations and coordination with Legal, Privacy, Communications, business continuity and external partners.
• Define the strategy and operating model for security information and event management, detection engineering, automation, orchestration, case management and operational metrics, and improve visibility across cloud, hybrid, on-premises, endpoint, identity, application, regional office, data centre
• Arena, game, event and broadcast environments.
• Own the development, maintenance, approval and communication of NBA arena cybersecurity standards and minimum requirements, including requirements for secure network segmentation, remote access, identity, logging, monitoring, vulnerability management, incident response
• Resilience and third-party connectivity.
• Lead or oversee arena cybersecurity assessments, control validation, risk reviews, penetration testing strategy, remediation prioritisation, exception management and executive reporting, and coordinate cyber readiness for games and events through exercises, communication protocols
• Dependency mapping and recovery expectations for critical arena services.
• Use risk, threat, asset criticality, exploitability and business impact to prioritise remediation and investment decisions, ensure detection and prevention controls are regularly tested against relevant threat scenarios, and align architecture and operations with NBA policies
• Contractual requirements and recognised frameworks such as ISO 27001, CIS Controls and SOC 2 while developing executive-level metrics and dashboards.
• Assist with the secure adoption of generative AI, machine learning, automation and emerging technologies through architecture standards, operational controls and risk-based governance, and evaluate emerging cybersecurity technologies and automation opportunities that improve speed, scale, visibility

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering or a related technical discipline.
• 15+ years of progressive experience across cybersecurity, technology operations, architecture, engineering, incident response or related disciplines.
• 8+ years of leadership experience across enterprise security operations, cybersecurity architecture, cloud security, infrastructure security or a comparable technical portfolio.
• Demonstrated success leading complex cybersecurity capabilities in global, highly visible or operationally demanding environments.
• Experience developing enterprise architecture standards and operating security capabilities across cloud-native, hybrid, SaaS, application, infrastructure, identity, data and operational technology environments.
• Experience leading major cyber incidents, crisis coordination, executive communications, exercises and post-incident improvement.
• Experience establishing standards, governance, assessment and support models across distributed or independently operated environments.
• Demonstrated experience influencing enterprise-wide technology decisions and collaborating with executive leaders, engineers, operators, business stakeholders, legal teams and external partners.
• Experience managing leaders, multidisciplinary technical teams, strategic vendors and significant cybersecurity investments.
• Deep expertise in security operations, incident response, detection engineering, threat hunting, security architecture, cloud security, infrastructure security, identity, network security and cyber resilience.
• Strong understanding of modern enterprise and venue technology environments, including cloud services, network segmentation, remote access, SaaS, operational technology, telemetry, logging, endpoint protection and third-party connectivity.
• Ability to connect architecture decisions with operational outcomes, including visibility, detection quality, response speed, recoverability, reliability and supportability.
• Strong knowledge of AWS, Azure, hybrid-cloud environments, modern application architectures, data platforms, automation and emerging technologies.
• Working knowledge of generative AI security, AI governance and evolving technology risk landscapes.
• Expertise with NIST CSF, NIST guidance for operational technology, ISO 27001, CIS Controls, SOC 2 and related industry standards.

• Master's degree preferred.
• Venue, sports, media, entertainment, critical infrastructure or large-event experience is strongly preferred.
• One or more relevant certifications such as CISSP, CISM, GIAC, CCSP, SABSA, TOGAF, AWS or Azure security certifications, or equivalent demonstrated expertise.

• Eligible employees have the option to work remotely one day per week.

• Annual discretionary performance bonus, awarded at the sole discretion of the company and subject to any terms and conditions set by the company.
• Medical, dental and vision insurance.
• Life/AD&D insurance and short- and long-term disability.
• Fertility and family-forming assistance.
• Wellbeing allowance.
• Educational assistance.
• Mental health coaching/therapy.
• Tax-advantaged accounts such as HSA and healthcare/dependent care FSAs.
• 401(k) retirement plan.
• Time off benefits including vacation, sick time and personal days.