VP, Cybersecurity Operations

WORK OPTION: The NBA currently provides eligible employees the option of working remotely one day per week._________________Position SummaryThe National Basketball Association (NBA) is seeking a strategic, highly collaborative, and technically credible Vice President, Cybersecurity Operations & Architecture to lead the design, operation, and continuous improvement of cybersecurity capabilities across the organization’s global technology ecosystem. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the senior leader accountable for integrating enterprise security architecture with day-to-day cyber defense, incident response, threat detection, and infrastructure protection.
The Vice President will establish security architecture strategy, standards, roadmaps, and reference architectures while ensuring those designs translate into sustainable operational controls, measurable detection coverage, effective response capabilities, and resilient technology services. The role will partner extensively with Cybersecurity, Enterprise Technology, Infrastructure, Engineering, Digital Products, Data & Analytics, Media Operations, Basketball Operations, Legal, Privacy, Compliance, NBA teams, arena operators, and external technology partners.
A core responsibility is setting NBA arena cybersecurity standards and making certain they are adhered to. This includes defining practical and enforceable requirements, guiding assessments and remediation, and addressing the security of arena IT, cloud-connected services, operational technology, building and display control systems, game and event technologies, broadcast dependencies, and third-party integrations.
Major ResponsibilitiesCybersecurity Strategy, Leadership & Operating ModelDevelop and execute an integrated, multi-year cybersecurity operations and architecture strategy aligned with business priorities, technology roadmaps, risk tolerance, and the evolving threat landscape.
Lead and mature the Cybersecurity Operations and Cybersecurity Architecture functions, establishing clear accountability, decision rights, service models, performance expectations, and escalation paths.
Serve as a trusted advisor to the CISO and senior technology leadership on cyber risk, resilience, major technology investments, crisis readiness, and strategic security priorities.
Translate cybersecurity strategy into funded roadmaps, measurable outcomes, workforce plans, vendor strategies, and prioritized improvement initiatives.
Promote a shared-ownership model in which cybersecurity is embedded into technology planning, engineering, operational processes, and business initiatives.
Enterprise Security Architecture LeadershipEstablish and maintain the NBA’s enterprise cybersecurity architecture strategy, roadmap, standards, design patterns, and reference architectures in partnership with cybersecurity, infrastructure, engineering, data, product, and business technology leaders.
Lead security architecture reviews for major technology initiatives and provide pragmatic guidance that balances cybersecurity risk, operational realities, resiliency, performance, cost, and business objectives.
Develop and maintain reference architectures for cloud services, applications, infrastructure, identity, data platforms, media operations, arena technologies, operational technology, on-premises data centers, and third-party integrations.
Ensure security requirements are incorporated early in technology planning, procurement, design, development, deployment, and lifecycle management.
Provide architectural leadership for identity and access management, network segmentation, zero trust, encryption, logging, monitoring, cyber resiliency, data protection, and secure connectivity.
Represent cybersecurity in enterprise architecture, governance, design review, and technology investment forums.
Security Operations, Detection & Incident ResponseLead enterprise security operations, including continuous monitoring, threat detection, threat hunting, incident triage, containment, investigation, recovery coordination, and post-incident improvement.
Define the strategy and operating model for security information and event management, detection engineering, automation, orchestration, case management, and operational metrics.
Improve visibility across cloud, hybrid, on-premises, endpoint, identity, application, regional office, data center, arena, game, event, and broadcast environments.
Establish clear incident response roles, severity criteria, escalation protocols, executive communications, evidence handling expectations, and coordination with Legal, Privacy, Communications, business continuity, and external partners.
Lead readiness planning and cyber support for marquee events, games, broadcasts, and other high-visibility business operations, including tabletop exercises and scenario-based testing.
Drive continuous improvement through after-action reviews, lessons learned, control validation, and remediation trac