Director, Information Security

Who we are: Founded in 2001, Vivid Seats (NASDAQ: SEAT) is a leading online ticket marketplace committed to becoming the ultimate partner for connecting fans to the live events, artists, and teams they love. We believe in the power of experiences and are fiercely dedicated to building products that inspire human connections. Named as one of Built In's top places to work in 2023, we believe that our People are our greatest competitive advantage. To support our People, we have built a company culture that empowers our employees to embrace challenges, encourages unity through collaboration, and seeks to constantly evolve by leveraging data and inspiring innovation.

The Opportunity:   

As the Director, Information Security, you will lead a team of engineers responsible for maturing the information security program and ensuring the confidentiality, integrity, and availability of all corporate assets and data.  This role is responsible for the security and control of a wide variety of cloud platforms and technologies that impact all Vivid Seats teams and the operations of many of the mission-critical operations that support our marketplace operations. We are looking for a leader who can be hands-on if needed and has experience building and leading highly technical and operations-focused security teams. In this role, you will manage and evolve our information security policies and practices, governance and reporting, training and awareness, vulnerability and risk assessment and remediation, and business continuity. You will work closely with teams across the organization to implement a consistent security strategy and vision. The position has the responsibility for building and enhancing a security conscious culture and infrastructure that melds well with a fast-paced and growing technology company.   

How your role contributes to the success of Vivid Seats: 

• Develop, coach, and retain engineers in a high-performing engineering team, capable of operating in and responding to security incidents, as well as our internal and external stakeholder needs.   
• Lead hiring initiatives to attract, screen, and hire new engineering talent.  
• Plan and drive complex initiatives and act as a technical subject matter expert in security design, architecture, implementation, deployment, and support for all security operations.  
• Lead efforts to continually modernize and integrate our security tooling into our SDLC and CI/CD processes.  
• Utilize a consistent IT controls approach to ensure that our business and technology operations adhere to required industry and compliance controls (such as PCI, GDPR, CCPA, IT SOX, SOC 2, SSAE-16).  
• Lead a team to monitor, troubleshoot, maintain, and continuously improve our threat attack surface through patching, monitoring, proactive response, and effective incident management.  
• Identify and deliver application, infrastructure, and platform projects aimed at improving uptime, security, availability, capacity, cost-effectiveness, and performance   
• Promote development best practices by integrating application security into BDD, TDD, and pair programming in a fast-paced Agile environment   
• Ensure that project/department milestones/goals are met and managed to budgets.  
• Help us in our goal of building the Vivid Seats brand as a technology and security leader throughout the United States and Canada. 
• Demonstrate a security posture that is best in class for our industry; and helping to unlock the full potential of our business opportunities. 

How your role expectations will progress as Director, Information Security in the first 30, 90, and 180 days: 

30 days in 
 

• Acclimate to Vivid Seats’ values and organizational goals to understand how your department drives initiatives forward.    
• Learn how ticket marketplaces operate and how you’ll contribute to providing great experiences for our customers.  
• Understand your teams’ contributions and the needs of stakeholders that rely on your deliverables to bring business objectives to life.   
• Set weekly touch points with direct reports to understand their role, motivations, and needs, building trust and leading with empathy.   
• Develop basic understanding of applications, tech stack, security operations, and development.   
• Review and understand the project roadmap and operations processes currently in place for the team.   
• Complete 1-1 meetings with Infrastructure and Software leaders to understand their roles, priorities, and needs, building trust and a spirit of comradery.  
• Complete 1-1 meetings with key business stakeholders (Legal, HR, Operations) to unders