Director, IT Security

The Denver Broncos are one of the most popular franchises in all of sports. Whether judged by the measure of wins and championships, attendance, national television exposure or by the Broncos' reputation locally and throughout the NFL, there are few parallels in the world of professional sports. We are dedicated to being the best team to cheer for, play for, and work for across all of sports. We are looking for employees who are passionate about what they do, have fun doing it, and proud to represent the Denver Broncos Football Club and Empower Field at Mile High.

Job Summary: We are seeking a Director of IT Security to lead the strategy, growth, and oversight of the organization's cybersecurity program and posture. This role is built on three essential pillars: acting as a visionary program builder, a strategic thought partner for the organization, and a dedicated mentor to emerging talent.

To achieve success, you will partner closely with internal and external stakeholders to ensure that security is not a barrier, but an enabler of our organizational mission. You will view the organization’s needs through a cybersecurity lens to enhance overall technology operations, ensuring our "football-first" culture is supported by a resilient and modern digital defense.

This role is responsible for developing and executing an enterprise security strategy that protects business, stadium, and football operations while supporting innovation, reliability, and operational excellence. The Director of IT Security will serve as a key leader within the Technology department and a trusted advisor to senior leadership on cybersecurity risk, resilience, and readiness.

Duties & Responsibilities

• Cybersecurity Leadership & Program Building: Architect and lead a comprehensive cybersecurity program that manages risk while enabling business growth. Develop and maintain a multi-year cybersecurity roadmap, security policies, standards, and governance processes that align with organizational priorities and industry best practices.
• Risk Management & Compliance: Conduct regular vulnerability assessments and audits to ensure compliance with legal and industry standards. Lead enterprise risk assessments, third-party security reviews, control testing, and audit preparedness efforts in alignment with frameworks such as NIST CSF, CIS Controls, ISO 27001, and other applicable regulatory or industry requirements.
• Incident Response: Oversee the detection, investigation, and remediation of security breaches and incidents. Establish and maintain incident response plans, playbooks, tabletop exercises, and post-incident review processes to strengthen organizational readiness and recovery.
• Technology Management: Oversee deployment of security tools like EDR, firewalls, IAM systems, and cloud security controls. Provide strategic oversight of core security technologies, including endpoint detection and response, SIEM/log monitoring, IAM, MFA, PAM, vulnerability management,...