• The Senior Director, Team and Arena Security - Central Region will be responsible for assessing, planning, and executing industry-leading security programs to protect the safety of NBA employees, players, and fans at league-sponsored games and events both domestically and internationally. • This position will also support the NBA's business continuity and crisis management efforts. • This position will report to the Head of Team & Arena Security and will be geographically based. • This position will also directly support NBA Security’s Lead Investigator with on-court investigations as assigned. • The ideal candidate is a results-oriented, dynamic executive with proven experience in event security management, crisis management, and emergency planning. • Strong oral and written communication skills with an emphasis on preparing reports, security assessments, and analysis are required. • Conduct comprehensive security-based assessments and define, lead, and analyze strategic metrics to accurately measure the effectiveness of the security program in controlling and mitigating risk. • Responsible for budget management and reconciliation. • Build and sustain relationships with individuals at all levels of the organization, as well as with law enforcement and security professionals at the federal, state, and local levels. • Lead/mentor direct reports. • Provide proactive/preventative security measures and contingency planning. • Assure security is properly integrated into the overall planning process for all games and/or special events. • Maintain a best practices standard. • Oversee implementation of NBA and G League Arena Security Standards by teams and arenas. • Create and conduct player orientation and team-level awareness training. • Participate in the security planning and on-site management of security at selected special events, including the NBA, WNBA, NBA G League Playoffs and Finals, All-Star Games, Global Games, basketball camps, NBA Draft, and other special events. • Serve as a liaison with all relevant domestic and international law enforcement and national security agencies. • Conduct sensitive investigations across various areas, including players, referees, and other league and team employees for the NBA, WNBA, and G League. • Assist Legal and other departments in the investigation of any potential integrity-related misconduct. • Communicate effectively with senior leadership on all investigative findings.

• Liaise with Red Hat Product Security and partners on behalf of customers. • Liaise between customers’ operations and their security teams, and provide guidance on both general and industry-specific security paradigms. • Provide analytical support for routine, proactive security monitoring and any findings in any RH software that arise. • Provide analytical support for security impacts deriving from planned changes to any RH software on critical, sensitive systems, and timely diagnostic and remediation advice for ongoing security concerns affecting any RH software. • Mentoring security and operations staff regarding security attributes and security best practices for any RH software. • Facilitate customer use of the Project Lightwell clearinghouse to coordinate scanning, triage, patching, and backporting. • Collaborate with Red Hat Consulting to provide guidance on accelerating the software development lifecycle and OS patching at scale to maintain a trusted software supply chain. • Manage and grow customer relationships by delivering attentive, relationship-based support. • Build a sense of trust with customers and serve as their advocate within Red Hat • Perform technical reviews and share knowledge to identify and prevent issues. • Gain an understanding of customers’ technical infrastructures and environments, hardware, and offerings. • Create customer engagement plans and keep documentation on customer environments up to date. • Support enterprise customers implementing automated and containerized cloud application platform solutions. • Perform initial or secondary investigations and respond to online and phone support requests • Partner closely with Red Hat's engineering, product management, and technical support teams to debug, test, and resolve. • Regularly contribute to the Red Hat knowledge base and share best practices with peers and colleagues. • Participate in internal projects and initiatives, and serve as a subject-matter expert and mentor for specific technical or process areas. • Deliver key portfolio updates and help our customers successfully implement upgrades. • Manage customer use cases and maintain clear and concise case documentation • Engage with Red Hat's solutions engineering teams to help develop solution patterns based on customer engagements and personal experience to guide platform adoption. • Engage with Red Hat's field teams, customers, and partners to ensure a positive cloud technology experience and a successful outcome resulting in long-term enterprise success. • Handle tough problems in an innovative way. Subject Matter expert on the Security and the Red Hat portfolio.

• Own and operate the enterprise risk management framework, including risk appetite statements, risk registers, and risk reporting cadences. • Lead periodic risk assessments across business functions, identifying emerging threats and evaluating the effectiveness of existing controls. • Maintain and evolve risk taxonomy, scoring methodologies, and heat maps aligned to industry best practices (e.g., COSO ERM, ISO 31000). • Drive integration of risk management into strategic planning, product development, and change management processes. • Prepare and present risk reports for senior leadership, the Board, and audit/risk committees, translating complex risk data into actionable insights. • Establish and track key risk indicators (KRIs) and ensure timely escalation of critical risk events. • Maintain risk management policies, standards, and procedures; drive policy review cycles and updates. • Serve as a trusted advisor to business unit leaders on risk-related matters, helping embed a risk-aware culture. • Collaborate with IT Security, Legal, Privacy, and Internal Audit teams on integrated risk and control activities. • Support third-party and vendor risk management activities in coordination with Procurement and IT. • Lead, mentor, and develop a team of risk analysts and specialists within the GRC function. • Set team goals, manage performance, and foster a culture of continuous improvement and professional development. • Drive process automation and tooling improvements to enhance risk program efficiency and scalability. • Coordinate risk management contributions to internal and external audits, regulatory examinations, and compliance assessments. • Monitor the evolving regulatory landscape and assess implications for the organization's risk profile.

Role Description ICF is seeking a Cybersecurity Strategist for a program responsible for ensuring critical infrastructure protection and resilience through effective collaboration with the private sector. The Cybersecurity Strategist will support strategic initiatives that are developed internally and externally to enhance critical infrastructure and the U.S. cyber ecosystem. They will also support stakeholder engagement, program management, and event execution. This position is able to be fully remote. - Support project and program management for strategic collaboration initiatives with industry partners (e.g. developing and maintaining POAMs, project plans, etc.) - Support and contribute to engagement with industry partners, including email correspondence, meeting coordination, and in-person/virtual meetings - Support the identification and development of new strategic initiatives by maintaining awareness of client operational activities, trends and publications across the cybersecurity ecosystem, and key feedback and observations by industry partners - Develop and maintain operational plans and program management plans for strategic initiatives - Coordinate and facilitate joint cyber defense exercise and training events - Assist in developing incident response plans and procedures - Supporting information sharing initiatives to improve collaboration among stakeholders - Monitor and evaluate the effectiveness of operational plans and make recommendations for improvement - Coordinate with internal partners to ensure all parties are aligned on actions and expectations - Collaborate with internal and external partners to identify cyber threats and vulnerabilities Qualifications - Active DOW security clearance required - U.S. Citizenship required (required by federal government for position) - Ability to travel for client events several times per year - 5+ years of experience Requirements - Bachelor's degree in a relevant field strongly preferred (cybersecurity, information systems, etc.) - Experience working as a consultant to a federal government client, ideally in a national security setting - Knowledge of cybersecurity principles and best practices - Excellent oral and written communication/presentation skills, including high level of attention to detail and ability to quality-control internal and external communications and products - Familiarity with project management approaches and concepts - Ability to work effectively in a collaborative team environment Benefits - Industry-standard certifications a plus (CompTIA Sec+, CEH, etc.) - Familiarity with relevant national incident response and coordination policies and relevant structures - Experience supporting a federal government agency in an onsite or hybrid position - Experience working across government and private sector organizations to meet goals and objectives - Demonstrated experience with Microsoft Office, including Word, Excel, PowerPoint, Outlook, Project, Teams, and SharePoint. Experience with Confluence/Jira is a plus.