Sr. Analyst, Cybersecurity at NexGen Sports Group, Inc.

Description

The Sr. Analyst, Cybersecurity is an experienced, hands-on security professional who helps protect TMRW Sports' people, technology, data, and live-event operations. Reporting to the Director, Cyber Security, this role strengthens day-to-day security operations by anticipating, monitoring, and investigating threats, leading incident response activities, reducing vulnerabilities, and improving the security and resilience of TMRW Sports’ cloud, endpoint, identity, and third-party environments. The Sr. Analyst will serve as a trusted partner across the business to translate risk into practical action, mature security processes, and support secure innovation in a fast-moving sports, media, and entertainment organization.

Responsibilities:

• Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
• Lead and actively participate in incident response activities, including evidence collection, scope analysis, stakeholder communications, root-cause identification, recovery validation, and post-incident improvement actions
• Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
• Lead vulnerability management activities, including asset and exposure review, risk-based prioritization, remediation coordination, exception tracking, and verification of corrective actions
• Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization
• Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization’s advanced security posture
• Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members
• Support cybersecurity planning for live events, venue security, and special events by identifying cyber dependencies, operational risks, monitoring needs, and incident escalation paths
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks
• Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed
• Participate in after-hours incident response as needed

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent relevant professional experience
• 5+ years of progressive cybersecurity experience, including substantial hands-on responsibility in security operations, incident response, threat detection, vulnerability management, or cloud security
• Understanding of how IT and security can enable business operations
• Demonstrated experience investigating complex security events and coordinating incidents from initial triage through containment, recovery, and lessons learned
• Working knowledge of common attacker techniques and defensive frameworks, including MITRE ATT&CK, identity-based attacks, phishing, malware, lateral movement, persistence, and data exfiltration
• Hands-on experience with SIEM, EDR/XDR, email security, vulnerability scanning, identity and access management, and cloud-native security tooling
• Practical knowledge of cloud environments and AI security
• Ability to analyze logs and technical evidence from multiple sources, recognize patterns, document conclusions, and make risk-based recommendations
• Strong written and verbal communication skills, including the ability to explain technical risk and response decisions to technical teams, business stakeholders, and leadership
• Sound judgment, discretion, attention to detail, intellectual curiosity, and the ability to manage competing priorities in a high-tempo environment

Preferred:

• One or more relevant certifications, such as CISSP, GIAC, Security+, CySA+, SC-200, AZ-500, AWS Certified Security - Specialty, or equivalent practical credentials
• Experience in sports, media, entertainment, broadcast, live-event, venue, or other high-availability operational environments
• Familiarity with security and privacy frameworks or requirements such as NIST CSF, NIST 800-61, CIS Controls, ISO 27001, SOC 2, PCI DSS, and applicable privacy obligations

You’ll be successful if you possess:

• Strong analytical, investigative, and problem-solving skills with the ability to assess complex security risks

...