NBA

Role Description This position is part of the NBA Social & Digital Content team which focuses on identifying, creating, distributing and publishing content to the NBA's social and digital platforms and its many domestic and international partners throughout the world. As the demand for content on the NBA's social platforms continues to grow, this is your opportunity to grow with us in a fast-paced, innovative and collaborative environment, reaching social followers around the world. The ideal candidate is a vertical video platform expert who understands the latest trends, how to create content on Snapchat and fully understands the publishing process on the platform. Not only do they understand Snapchat and its features, but they are also creative experts on building content for Facebook Reels, Instagram Reels, TikTok, YouTube Shorts and Stories across multiple platforms. Lastly, this candidate has their finger on the pulse of the NBA and spends their free time immersing themselves in podcasts, message boards or consuming short and long form content about the NBA. Major Responsibilities - Provide real-time game coverage by producing and publishing content for the NBA’s nightly and weekly Snapchat Shows (this may include working days, nights, weekends and holidays). - Collaborate with an NBA video editor to produce the best moments from games and events by creating engaging video and adding storytelling captions. - Analyze platform metrics to optimize each show’s performance, which may require updating tile images and episode titles. - Actively content plan for the NBA’s weekly and nightly Snapchat Shows and related show content. - Assist with managing additional Snapchat platform features including Spotlight, AR, Stickers, Filters, Lenses, Bitmojis, Cameos, and My Story posts, for example. - Strategize, implement, and track Snapchat’s feedback, guidelines and platform updates to best increase performance metrics. - Ability to assist with publishing to additional NBA social platforms, when needed. Qualifications - Strong knowledge of creating content for and publishing to vertical video platforms with experience working for a sports brand, media organization or other entertainment brands. - Strong knowledge about the NBA, and is passionate about the storylines surrounding its players, coaches, teams, statistics, standings, and history of the league, as well as excellent understanding of basketball stats and analytics, the rules of the game and the history of the game. - Experience creating basketball content. - Strong understanding of the NBA’s social voice. - Willingness to work a flexible schedule as this position may include working days, nights, weekends, and holidays based on the NBA calendar. - Ability to work on deadline and handle multiple tasks at once with a precise and detail-oriented approach. - Ability to perform in a fast-paced environment while handling critical tasks in a composed and timely manner. - Excellent organizational and project management skills. - Great communication skills and ability to execute feedback given. - Must be a team player who can work collaboratively. Education - Bachelor's Degree in Communications or related field preferred. Salary Range - $2,307.69/biweekly. Benefits - Medical. - Short-term disability. - Mental health coaching/therapy. - Sick time. Eligibility Note Not all positions are eligible for these benefits; eligibility may vary by role. Company Description The National Basketball Association (NBA) is a global sports and media organization with the mission to inspire and connect people everywhere through the power of basketball. Built around five professional sports leagues: the NBA, WNBA, NBA G League, NBA 2K League and Basketball Africa League, the NBA has established a major international presence with games and programming available in 214 countries and territories in 60 languages, and merchandise for sale in more than 200 countries and territories on all seven continents. NBA rosters at the start of the 2024-25 season featured a record-tying 125 international players from a record-tying 43 countries. NBA Digital’s assets include NBA TV, NBA.com, the NBA App and NBA League Pass. The NBA has created one of the largest social media communities in the world, with more than 2.3 billion likes and followers globally across all leagues, team and player platforms. NBA Cares, the NBA’s global social responsibility platform, partners with renowned community-based organizations around the world to address important social issues in the areas of education, inclusion, youth and family development, and health and wellness.

• Manage the enterprise vulnerability management program across cloud and on-premises environments, leveraging risk-based decision making to prioritize remediation efforts, coordinate stakeholders, and reduce organizational exposure. • Design, implement, and operate AI security strategies and governance processes to ensure secure adoption of emerging AI technologies, identifying, assessing, and mitigating associated risks in alignment with organizational goals. • Oversee the Cyber Threat Intelligence program, leveraging intelligence collection and analysis to identify and prioritize emerging risks, deliver actionable intelligence, and communicate threat assessments to technical, business, and executive stakeholders. • Collect and aggregate intelligence from OSINT, Deep/Dark Web resources, and other intelligence sources to monitor exploitable and high-profile threats impacting the NBA League Office and NBA teams. • Research emerging threat actor tactics, techniques, and procedures (TTPs) to assess risk and validate security controls. • Perform continuous monitoring and exposure management activities across cloud, on-premises, and external-facing environments to identify emerging security risks, obsolete systems, and configuration weaknesses. • Manage the League's Team Audit and Risk Assessment Program across all NBA teams, overseeing assessments, control evaluations, remediation tracking, and reporting to strengthen security governance and ensure compliance with League security requirements. • Collaborate closely with cross-functional business units and NBA teams to drive security initiatives, coordinate remediation of identified vulnerabilities, and reduce the NBA's overall risk profile. • Communicate findings, risk posture, and program metrics & key performance indicators (KPIs) to technical operators, business stakeholders, NBA teams, and senior leadership to support informed decision-making and continuous improvement.

• Secure CI/CD pipelines at scale across the organization's CI/CD platforms with standardized security templates and automated policy enforcement, embedding static analysis (SAST), software composition analysis (SCA), container, infrastructure as code (IaC), and secrets scanning, with break build enforcement on critical and high severity findings • Administer the enterprise SAST and SCA platform (scan engine infrastructure, query tuning, severity calibration, finding triage) and maintain the exploitability knowledge base that distinguishes true positives from false positives to keep security fast and low friction • Build automated compliance tooling that detects required scans, validates pipeline configuration, and flags coverage gaps; audit pipeline posture across platforms and drive remediation directly with engineering teams • Support secure SDLC practices and security gates (SAST, SCA, container, IaC, DAST), threat modeling, SBOM generation, and dependency verification; coordinate with the DAST and penetration testing functions and act on bug bounty findings • Design and build the enterprise security operations platform and the automation that orchestrates DevSecOps workflows (scan state changes, triage, exemptions, intake, notifications), including AI-assisted vulnerability triage with appropriate guardrails, audit trails, and human oversight • Define and report security risk metrics, lead security audits and assessments, conduct supply chain and CVE incident response across the estate, and mentor junior team members • Lead security reviews of Generative AI applications, agentic workflows, and AI developer tools submitted through the enterprise AI intake process, assessing against OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, and NBA Gen AI security policy and standards • Author and maintain NBA Generative AI security policy and standards, including controls for AI data protection, model and prompt security, agentic AI, MCP (Model Context Protocol) integration, and AI developer tooling • Evaluate and onboard Gen AI security tooling such as runtime guardrails, AI red teaming, browser and DLP controls, and MCP governance, and design and operate runtime AI security controls integrated into application pipelines and runtime • Govern enterprise security over AI developer tooling and the MCP server approval workflow, and partner with the Enterprise Gen AI, Cloud Infrastructure, GRC, Legal, and Privacy functions to align AI security controls with broader AI governance • Administer and operate the enterprise cloud security platform across a large multi-cloud estate (cloud posture, container, and IaC scanning); detect, prioritize, and drive remediation of misconfigurations and vulnerabilities against defined SLAs with infrastructure and application teams • Own cloud security scanning policy configuration and service account governance (scope, least privilege, credential rotation), lead platform lifecycle work, and perform technical security configuration assessments of cloud platforms • Own the Kubernetes security posture across a large cluster footprint, including admission control, RBAC, namespace isolation, network policies, and Pod Security Standards, and execute admission controller enforcement programs that move policies from audit to block in staged, owner-communicated rollouts with exception and rollback processes • Design and operate automated credential rotation across cloud identity and key management services (cross-account role assumption, grace periods, owner notifications) and lead the initiative to eliminate static access keys in favor of OAuth 2.0, OIDC, and role-based authentication • Manage the secrets lifecycle across cloud and pipeline secret stores with detection, alerting, and automated rotation, and build reporting that surfaces aging and non-compliant secrets

• Aggregate risk posture, control gaps, and issue status across all cybersecurity towers into cohesive dashboards and executive-ready reporting frameworks • Serve as the single point of GRC intelligence — translating disparate signals into a coherent organizational risk picture • Establish and maintain consistent metrics and KPIs that reflect compliance health across all towers • Own end-to-end issue lifecycle management — from identification through remediation — ensuring findings don't stall in handoff gaps • Build accountability mechanisms across tower leads and partner teams that keep risk closure on track without requiring direct authority • Ensure non-IT departments follow documented processes and help them address audit gaps • Escalate systemic issues and trend patterns to senior leadership with actionable recommendations • Lead all aspects of ISO 27001 certification maintenance, including evidence collection, control mapping, audit readiness, and continuous improvement • Manage relationships with external auditors and certification bodies • Ensure the program remains audit-ready year-round, not just at certification time • Contribute into our SOC 2 Type II program and lead compliance posture across applicable trust service criteria • Coordinate with engineering, IT, and operations teams to ensure controls are implemented, evidenced, and sustainable • Conduct and document Level 1 cyber risk assessments using established frameworks including NIST CSF and ISO 27001 • Maintain the enterprise cyber risk register, ensuring risks are properly rated, owned, and tracked toward resolution • Surface emerging risks tied to our industry — fan data systems, broadcast infrastructure, global event operations — with appropriate context for decision-makers • Partner with tower leads, IT, Legal, Privacy, and Procurement to align on risk priorities and drive coordinated remediation • Communicate policy and regulatory requirements in language that resonates with both technical practitioners and executive stakeholders • Operate as a trusted advisor across the organization — influencing outcomes without relying on org chart authority • Identify opportunities to replace manual compliance effort with scalable automation through GRC platforms and integrations • Drive adoption and optimization of tools such as Drata, ServiceNow GRC, OneTrust, or equivalent platforms • Stay ahead of the tooling landscape and bring forward recommendations that improve program efficiency and coverage • Maintain working knowledge of regulations relevant to our global footprint — including GDPR, CCPA, and evolving data residency requirements across international markets • Support third-party and vendor risk review processes in coordination with Legal and Procurement, ensuring vendor relationships meet our compliance standards

• Support the NBA and its affiliated leagues by designing high-impact visual communications • Act as a backup manager for the Communications team's social media accounts • Contribute to the NBA Storyline Creation Team by conceptualizing engaging narratives • Serve as the On-Duty Communications Representative during NBA games • Provide communications and media relations support at major events across all leagues

• The Senior Director, Team and Arena Security - Central Region will be responsible for assessing, planning, and executing industry-leading security programs to protect the safety of NBA employees, players, and fans at league-sponsored games and events both domestically and internationally. • This position will also support the NBA's business continuity and crisis management efforts. • This position will report to the Head of Team & Arena Security and will be geographically based. • This position will also directly support NBA Security’s Lead Investigator with on-court investigations as assigned. • The ideal candidate is a results-oriented, dynamic executive with proven experience in event security management, crisis management, and emergency planning. • Strong oral and written communication skills with an emphasis on preparing reports, security assessments, and analysis are required. • Conduct comprehensive security-based assessments and define, lead, and analyze strategic metrics to accurately measure the effectiveness of the security program in controlling and mitigating risk. • Responsible for budget management and reconciliation. • Build and sustain relationships with individuals at all levels of the organization, as well as with law enforcement and security professionals at the federal, state, and local levels. • Lead/mentor direct reports. • Provide proactive/preventative security measures and contingency planning. • Assure security is properly integrated into the overall planning process for all games and/or special events. • Maintain a best practices standard. • Oversee implementation of NBA and G League Arena Security Standards by teams and arenas. • Create and conduct player orientation and team-level awareness training. • Participate in the security planning and on-site management of security at selected special events, including the NBA, WNBA, NBA G League Playoffs and Finals, All-Star Games, Global Games, basketball camps, NBA Draft, and other special events. • Serve as a liaison with all relevant domestic and international law enforcement and national security agencies. • Conduct sensitive investigations across various areas, including players, referees, and other league and team employees for the NBA, WNBA, and G League. • Assist Legal and other departments in the investigation of any potential integrity-related misconduct. • Communicate effectively with senior leadership on all investigative findings.

• Own reliability and operational excellence for messaging and collaboration platforms. • Serve as a senior escalation point for complex issues across Proofpoint, Exchange, Outlook, SMTP, and various collaboration services. • Lead incident response, service restoration, and root cause analysis in high-pressure, real-time scenarios. • Design and operate highly available, secure, and compliant messaging architectures. • Automate operations using PowerShell and Microsoft Graph. • Administer and support Slack and Microsoft Teams, including tenant/workspace configuration and escalations. • Provide white-glove, high-touch support for the NBA Executive Leadership Team, requiring professionalism, discretion, and urgency. • Partner with Security, Legal, and Audit teams on compliance, retention, and eDiscovery. • Participate in a formal rotating on-call schedule. • Provide after-hours, weekend, and holiday support. • Respond rapidly to incidents impacting game operations, executive leadership, or league-wide communications.

• Develop, lead, and implement security plans and logistics for global events. • Build and execute security plans for various global events. • Identify event vulnerabilities and develop analytical feedback and actionable strategies. • Create effective staffing and risk mitigation strategies. • Manage budgets to provide scalable resources across multiple events. • Build a network of vendors complying with national and international regulations. • Conduct periodic reviews and cost-benefit analyses. • Implement department standard methodologies and incorporate innovative protocols. • Oversee assessments and review security planning documents for events globally. • Conduct investigations involving game incidents, players, staff, and others.

WORK OPTION: Remote_________________ This is a temporary position with an expected duration not to exceed (10) months. Position Summary The Project Employee, Digital and Social Content Design, is part of the NBA’s Social & Digital Content team, which focuses on creating, distributing, and publishing content across the NBA’s digital and social platforms, as well as with its domestic and international partners. As demand for NBA content continues to grow, this is an opportunity to work in a fast-paced, innovative, and collaborative environment, reaching more than 100M fans worldwide. The ideal candidate is both a basketball fanatic and an expert designer. They are well-versed in Adobe Creative Suite, have a strong understanding of design principles, and bring meticulous attention to details such as kerning, logo usage, style guides, and compliance. Candidates should also have a deep knowledge of the NBA’s nightly storylines, players, and broader culture. Major Responsibilities/Attributes: - Produce nightly real-time graphics with a focus on both quality and engagement. - Create graphics and story-driven content for NBA social media handles (Twitter, Instagram, Facebook, YouTube, Snapchat, TikTok, GIPHY) to promote games and drive engagement. - Support real-time game coverage by creating and overseeing graphics from the NBA’s Content Command Center (nights and weekends required). - Ensure the NBA’s brand voice is consistent across all posts. - Participate in content planning sessions for the NBA’s social media channels. - Monitor social media and propose fresh ideas to reach new audiences and deepen fan engagement. - Potentially cover NBA events by publishing behind-the-scenes content to NBA platforms. Required Skills/Knowledge: - Ability to work nights and weekends as needed. Expertise in Adobe Photoshop with working knowledge of Adobe Creative Suite. - Meticulous and detail-oriented approach to design. Strong passion for the NBA, its players, coaches, and teams. - Knowledge of basketball stats, analytics, and rules of the game. - Familiarity with NBA culture, including sneakers, fashion, and music. - Proficiency in all major social media platforms and understanding of how the NBA uses each. - Strong writing skills with sound editorial judgment. - Ability to meet deadlines while managing multiple projects at once. - Flexibility to adapt to evolving schedules and priorities. Salary Range: $2307.69/biweekly Job Posting Title: Project Employees and/or eligible dependents may be eligible to participate in the following Company sponsored employee benefit programs: medical; short-term disability; mental health coaching/therapy; and sick time. Eligibility Note: Not all positions are eligible for these benefits; eligibility may vary by role. We Consider Applicants For All Positions On The Basis Of Merit, Qualifications And Business Needs, And Without Regard To Race, Color, National Origin, Religion, Sex, Gender Identity, Age, Disability, Alienage Or Citizenship Status, Ancestry, Marital Status, Creed, Genetic Predisposition Or Carrier Status, Sexual Orientation, Veteran Status, Familial Status, Status As A Victim Of Domestic Violence Or Any Other Status Or Characteristic Protected By Applicable Federal, State, Or Local Law. The NBA is committed to providing a safe and healthy workplace. To safeguard our employees and their families, our visitors, and the broader community from COVID-19, and in consideration of recommendations from health authorities and the NBA’s own advisors, any individual working onsite in our New York and New Jersey offices must be fully vaccinated against COVID-19. The NBA will discuss accommodations for individuals who cannot be vaccinated due to a medical reason or sincerely held religious belief, practice, or observance. About the NBA The National Basketball Association (NBA) is a global sports and media organization with the mission to inspire and connect people everywhere through the power of basketball. Built around five professional sports leagues: the NBA, WNBA, NBA G League, NBA 2K League and Basketball Africa League, the NBA has established a major international presence with games and programming available in 214 countries and territories in 60 languages, and merchandise for sale in more than 200 countries and territories on all seven continents. NBA rosters at the start of the 2024-25 season featured a record-tying 125 international players from a record-tying 43 countries. NBA Digital’s assets include NBA TV, NBA.com, the NBA App and NBA League Pass. The NBA has created one of the largest social media communities in the world, with more than 2.3 billion likes and followers globally across all leagues, team and player platforms. NBA Cares, the NBA’s global social responsibility platform, partners with renowned community-based organizations around the world to address important social issues in the areas of education, inclusion, youth and family development, and health and wellness.

• Drive the end-to-end product lifecycle for NBA’s mobile platforms • Collaborate with a team of Platform Product Managers responsible for mobile-specific execution (i.e., iOS & Android) • Partner with key stakeholders to define system-driven solutions that enable scalable content, personalization, and performance improvements • Serve as the primary key point of contact for mobile platform delivery excellence ensuring stability, feature parity, and release management • Participate in quarterly PI Planning for mobile platforms in collaboration with App Experience, Platform Services, PMO, and Engineering • Define cross-platform dependencies, sequencing, and feasibility to ensure predictable delivery of velocity • Translate business priorities into system-level requirements across backend services, APIs, and SDKs • Drive stack ranking and trade-off decisions to balance innovation, performance, and technical debt reduction • Ensure all features are system-aligned leveraging CMS and other backend services where possible • Conduct impact assessments across SDK upgrades, device performance, and store compliance (Apple, Google) • Drive coordination between Product, PMO, Engineering, QA, and Release Ops to maintain synchronized delivery cadences • Monitor platform health metrics (crash rates, ANRs, startup time, memory utilization)