Director, Cybersecurity

Director, Cybersecurity

Location: New York, NY (currently hybrid with up to 50% remote)

At TouchTunes, the world’s largest in-venue interactive music and entertainment platform, we’re all about sparking joy and human connection. That moment in a bar where someone at the next table cues the jukebox to play your favorite song? That’s what we do – our platform plays millions of songs daily – but we’re also so much more!  We just bought the largest soft-tipped darts business in the United States, we’re reinventing our mobile app for launch later this year, and we’re operating nearly 100,000 connected devices across North America and Europe. We’re innovators, strategic thinkers, people making the future possible today – and what a great time to join our team.

We’re looking to expand our legal and risk management department with a rockstar Director, Cybersecurity. You’ll work for our Sr. Director, Vendor Services & Cybersecurity, and partner with our Legal, IT, and business teams on developing our growing cybersecurity program, especially with respect to governance, compliance, and risk management. You’ll be a high-impact player on your first day and have the opportunity to grow with our business.

The ideal candidate will: (1) provide strategic, creative and effective business and risk management advice; (2) coach our company on cybersecurity matters, including compliance, trainings, and documentation; (3) use sound judgment in balancing risk against business needs and goals; (4) be an excellent communicator at all levels of an organization; and (5) thrive tackling complex challenges in a fast-paced environment.

Key Responsibilities:

• Under the direction of our General Counsel and our Sr. Director, Vendor Services & Cybersecurity, manage our company’s day-to-day compliance with our developing cybersecurity program, with a particular emphasis on governance and a focus on continuous improvement
• Spearhead development of: (1) a formal business continuity plan and associated processes, including defined Recovery Time Objectives and Recovery Point Objectives; and (2) an annual threat-mapping exercise with respect to relevant  cybersecurity and related risks
• Collaborate with our technology teams to identify business-critical systems and vulnerabilities
• Develop a regular testing protocol for cybersecurity vulnerabilities
• Drive compliance with our established cybersecurity protocols, with a particular focus on governance, training, and employee outreach
• Contribute to strategic business initiatives with a focus on minimizing legal risks in cybersecurity and disaster recovery

This is a key role in a high-growth area for TouchTunes, so we expect that this role will grow with our developing program.

Qualifications:

• B.A. or graduate degree in a relevant field with strong academic credentials
• 3-6 years of progressive experience in a relevant field (e.g., cybersecurity, forensics, data management, law, compliance)
• Significant experience with intellectual property, data management, business continuity, and disaster recovery
• Exceptional analytical, written, and verbal communication skills
• Strong project management skills, including using a project management tool, Excel, and PowerPoint

What is in it for you:

• Joining a dynamic, brilliant legal and risk management team
• Challenging, wide-ranging work in a high-growth area that has a direct impact on the company’s success
• A fun, exciting environment that’s all about creating human connection through music and other entertainment experiences
• A culture of pioneers who are changing the face of the amusements industry
• Very competitive insurance packages
• Competitive 401K package with company match
• Current work schedule requires 50% time onsite, including Tuesdays, Wendesdays, and every other Thursday

Work Requirements:

• In an effort to protect our fellow employees, their families and our customers, TouchTunes requires all employees working onsite to receive the COVID-19 vaccination with exemptions only for limited reasons required by law.
• Must be authorized to work in the United States
• Ability to perform primarily sedentary work, frequently using a computer (visual acuity, fine motor skills) and telephone (talking/hearing).
• Ability to listen, to understand, and to follow verbal and written directions
• Ability to exchange information in written format
• Ability to learn the procedures, function, and limitations of assigned duties
• Ability to recognize when there is a problem (when something is wrong or is likely to go wrong)
• Ability to apply general rules to specific problems to produce answers that make sense
• Flexibility to work outside of normal hours, including evenings, weekends, and holidays, as needed

TouchTunes is an Equal Employment Opportunity / Affirmative Action employer. TouchTunes provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.