Chief Information Security Officer

MLS Soccer league; Thunder Bay; Hybrid; USD 200,000 - 275,000; Full time

Job summary

An established industry player is on the lookout for a Chief Information Security Officer to spearhead their data privacy and cybersecurity initiatives. This pivotal role involves ensuring compliance with global data protection regulations while implementing robust security frameworks. The ideal candidate will possess deep expertise in data governance and will lead efforts to integrate privacy-by-design principles into software development. Join a vibrant workplace that values creativity and collaboration, where you will have the opportunity to make a significant impact on organizational security and compliance strategies while enjoying a flexible work environment.

Benefits

Comprehensive medical coverage

Dental coverage

Vision coverage

$500 wellness reimbursement

Generous PTO

Career and professional development opportunities

Flexible remote work options

Qualifications

• 12+ years of experience in information security and compliance leadership roles.
• Expert knowledge of GDPR, CCPA, HIPAA, and operationalizing compliance.

Responsibilities

• Oversee Data Privacy Management Platform and ensure compliance with privacy laws.
• Develop and enforce privacy and security policies for customer data platforms.

Skills

Data Governance

Privacy Impact Assessments

Cybersecurity Risk Management

Compliance Leadership

Communication Skills

Decision Making

Problem Solving

Interpersonal Skills

Education

Bachelor's Degree

Tools

Data Privacy Management Platforms

ISO 27001

NIST Privacy Framework

SOC 2

DevSecOps

Encryption Technologies

IAM Systems

Microsoft Office Suite

Job description

Overview

Major League Soccer (MLS) is seeking an experienced Chief Information Security Officer (CISO) to lead data privacy, compliance, and cybersecurity initiatives. The CISO will ensure MLS’s adherence to global data protection regulations (e.g., GDPR, CCPA, HIPAA) while implementing robust security frameworks (ISO 27001, NIST, SOC 2). This role will also be responsible for MLS’s Data Privacy Management Platform, ensuring secure and compliant data handling across digital platforms, customer data systems, and marketing technologies.

The ideal candidate has deep expertise in data governance, access controls, privacy impact assessments (PIAs), and third-party risk management. They will lead MLS’s efforts in integrating privacy-by-design principles into software development, ensuring that security and compliance are embedded across all business operations.

Responsibilities

• Oversee and manage MLS’s Data Privacy Management Platform, ensuring compliance with privacy laws and security best practices.
• Develop and enforce privacy and security policies for MLS’s customer data platforms (CDPs), identity management systems, and digital marketing technologies.
• Ensure compliance with GDPR, CCPA, HIPAA, and other global privacy frameworks, working closely with Legal, IT, and Marketing teams.
• Lead incident response, breach management, and regulatory reporting, ensuring adherence to data breach notification laws.
• Conduct privacy impact assessments (PIAs) and risk assessments for new technologies and data initiatives.
• Secure engineering processes and the software development lifecycle by implementing security measures such as code review, vulnerability testing, security education, and establishing DevSecOps practices.
• Oversee third-party Information Security risk management, ensuring vendor compliance with MLS’s security and privacy requirements.
• Lead security awareness and training programs for employees, contractors, and partners.
• Regularly report on security risks, compliance status, and emerging threats.
• Work with MLS Clubs on enterprise-wide security policies and data privacy management solutions.

Qualifications

Education and Experience

• Bachelor’s Degree required
• 12+ years of experience in information security, privacy, and compliance leadership roles.

Required Skills

• Expert knowledge of global data protection regulations (e.g., GDPR, CCPA, HIPAA) and how to operationalize compliance through policies, access controls, and technology.
• Experience managing Data Privacy Management Platforms and implementing privacy frameworks such as ISO 27701 (Privacy Information Management System), NIST Privacy Framework, and SOC 2 Privacy Criteria.
• Strong background in data governance, consent management, and privacy-by-design principles for digital platforms.
• Technical expertise in encryption, identity & access management (IAM), secure software development (DevSecOps), and cloud security.
• Experience leading cybersecurity risk assessments, vulnerability management, and incident response programs.
• Ability to collaborate across Legal, Compliance, IT, Marketing, and Business teams to align privacy and security initiatives with organizational goals.
• Exceptional communication and leadership skills, with the ability to engage executive stakeholders and drive security awareness.
• Relevant certifications such as CISSP, CISM, CIPP (US/EU), CRISC, or ISO 27001 Lead Implementer are preferred.
• High-level of commitment to a quality work product and organizational ethics, integrity and compliance.
• Ability to work effectively in a fast-paced, team environment.
• Strong interpersonal skills and the ability to effectively communicate, both verbally and in writing.
• Demonstrated decision-making and problem-solving skills.
• High attention to detail with the ability to multi-task and meet deadlines with minimal supervision.
• Proficiency in Word, Excel, PowerPoint, and Outlook.

Total Rewards

Major League Soccer offers a competitive starting base salary of $200,000 - $275,000, based on individual qualifications, market financials, and operational business needs. We are committed to providing a Total Rewards package that attracts, supports, engages, and retains talent. Our benefits package includes comprehensive medical, dental, and vision coverage, a $500 wellness reimbursement, and generous PTO. We also prioritize career and professional development, offering on-the-job training, feedback, and ongoing educational opportunities.

We believe in the power of in-person collaboration to fuel creativity, strengthen connections, and cultivate a vibrant workplace. As a result, employees are required to work from an MLS office at least four days a week. We understand the value of balance, so employees also have the flexibility of working remotely on Fridays, along with the option to take up to two additional remote flex days each month.

At Major League Soccer, we are proud to be an equal opportunity employer. We value diversity and inclusion and believe that a diverse workforce enhances our ability to compete in the marketplace. We are committed to providing equal employment opportunities to all individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. We are dedicated to ensuring that individuals with disabilities are provided reasonable accommodation throughout the job application or interview process, essential job functions, and other benefits and privileges of employment. If you require accommodation, please contact us to request it.