Director, Information Security

NASCAR • Daytona Beach, FL

1d • Onsite

About The Position

At NASCAR, you will find a community of passionate individuals who care about our sport and are united in seeing it grow. NASCAR seeks a talented professional to join in the position of Director, Information Security, based in our Daytona Beach, Florida office. The Director, Information Security is responsible for defining and executing NASCAR’s information security strategy, ensuring protection of corporate, operational, and media technology assets across cloud, on-premises, and event-based environments. This leadership role oversees the entire Information Security organization—including governance, risk, compliance, and security engineering functions—to safeguard the confidentiality, integrity, and availability of enterprise data and systems. The Director establishes long-term security direction, builds organizational capability, and leads the alignment of security priorities with NASCAR’s business goals. This position collaborates closely with Technology, Legal, and Risk to guide security investment, risk posture, and incident response readiness across all business units and racing operations. This is a leadership role focused on governance, program maturity, and organizational resilience, driving proactive risk management and fostering a strong security culture throughout the enterprise. Duties include but are not limited to:

Requirements

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related field; advanced degree a plus but not required.
• 10+ years of progressive experience in cybersecurity or information security, with at least 4 years in leadership roles.
• Demonstrated success developing and leading enterprise security programs at scale within complex or regulated environments.
• Technical & Strategic Skills Deep understanding of enterprise security architecture, risk management, and governance frameworks (NIST, ISO 27001, CIS, SOC, PCI DSS).
• Proven ability to translate business risk into actionable security strategies and programs.
• Broad knowledge of cloud (AWS, Azure), endpoint, identity, and network security technologies.
• Experience leading major incident response efforts and security transformation initiatives.
• Familiarity with security considerations for hybrid IT, OT, and media broadcast systems preferred.
• Professional Attributes Leader who balances strategic foresight with practical execution.
• Exceptional communication and presentation skills, with the ability to influence across all levels of the organization.
• Strong relationship builder who can align technology, legal, and business priorities.
• High integrity, sound judgment, and an unwavering commitment to protecting the enterprise.
• Proven experience managing budgets, vendors, and complex cross-functional programs.

Nice To Haves

• CISSP, CISM, CISA, CRISC, CCISO, or equivalent senior-level certifications.

Responsibilities

• Collaborate cross-functionally with IT Infrastructure, Cloud Operations, and Engineering leadership to ensure alignment of security strategies and technical implementations across enterprise systems.
• Provide leadership and strategic direction for NASCAR’s enterprise-wide information security program, ensuring alignment with organizational goals and regulatory requirements.
• Develop, communicate, and execute a multi-year cybersecurity roadmap encompassing risk management, incident response, and compliance initiatives.
• Lead, mentor, and manage a team of Senior Managers, Engineers, and Analysts; define objectives, allocate resources, and ensure continuous professional development.
• Establish and maintain enterprise security governance frameworks, policies, and standards in accordance with industry best practices.
• Oversee enterprise risk management programs, ensuring that risk assessments, mitigation plans, and residual risk acceptance processes are embedded into business operations.
• Partner with business leaders to integrate security into strategic initiatives, product launches, broadcast systems, and emerging technologies.
• Serve as the senior escalation point for major incidents, breaches, or investigations, providing executive communications and post-incident reviews.
• Oversee compliance with privacy, data protection, and industry regulations (e.g., PCI DSS), ensuring audit readiness and continuous improvement.
• Lead cross-functional initiatives to enhance threat detection, vulnerability management, and identity & access management programs.
• Present regular updates to the Leadership Team on cybersecurity posture, key metrics, and investment performance.
• Manage the annual security budget, ensuring fiscal responsibility while supporting innovation and capability expansion.
• Serve as a visible advocate for information security, fostering a culture of accountability, awareness, and proactive defense across all levels of the organization.
• Build partnerships with law enforcement, industry peers, and vendors to stay ahead of the evolving threat landscape.

Benefits

• We offer highly competitive salaries, a solid benefits package focused on wellness, and opportunities for you to grow and develop both personally and professionally.

What This Job Offers

• Job Type: Full-time
• Career Level: Director