Director, Information Security Engineering and Operations

Callaway Golf; Carlsbad (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Callaway Golf is seeking a Director of Information Security Engineering and Operations to lead our global security engineering and operations teams. You will shape the cybersecurity strategy, oversee architecture, and drive enterprise security initiatives across IT and business units.

You will design secure infrastructure, policies, and playbooks aligned with frameworks, coordinate incident response, and collaborate with Legal, HR, and Finance to manage risks and security programs.

Responsibilities

• Manage and oversee a global team of security engineers and analysts to deliver projects that execute the company’s cybersecurity strategy.
• Develop the overall cybersecurity strategy in coordination with the Sr. Director of Global Information Security and Sr. VP of Global IT.
• Provide coaching, direction, and leadership support to employees to achieve department and company results aligned with cybersecurity, IT, and business strategies.
• Design information security policies and playbooks that align with enterprise frameworks and the overall cybersecurity strategy.
• Oversee and perform security risk assessments and testing for new technologies and IT projects.

Job description

Callaway Golf Company is a premium golf equipment, gear and apparel company with a portfolio of global brands, including Callaway Golf, Odyssey, TravisMathew, and OGIO. Through an unwavering commitment to innovation and premium craftsmanship, Callaway designs, manufactures, and sells high-performance golf clubs, golf balls, apparel, bags, and other accessories—setting the standard for performance in the game of golf.

Our Mission: To create demonstrably superior and pleasingly different products powered by innovative technology and premium craftsmanship enabling golfers of all abilities to play their best and find more joy in the game.

Our company is a blend of experience and diverse backgrounds, and together we look to leave the past behind while moving the game forward. For more information, please visit https://www.callawaygolf.com

The Director, Information Security Engineering and Operations is accountable for the following responsibilities, leading security engineering, architecture, and operations globally:

Team Leadership & Strategy

• Manage and oversee a global team of security engineers and analysts to deliver projects that execute the Company’s cybersecurity strategy.
• Develop the overall cybersecurity strategy in coordination with the Sr. Director of Global Information Security and Sr. VP of Global IT.
• Provide coaching, direction, and leadership support to employees to achieve department and company results aligned with cybersecurity, IT, and business strategies.

Security Architecture & Engineering

• Manage and oversee assessments of the security program and IT architecture to identify gaps and recommend actionable, realistic improvements.
• Design and create solutions that align with enterprise security architecture frameworks and standards (e.g., NIST CSF, ISO 27002, CIS benchmarks) and overall business and security strategy.
• Design information security policies and playbooks that align with enterprise frameworks and the overall cybersecurity strategy.
• Help design a secure infrastructure layer, in coordination with Global IT Infrastructure, that isolates sensitive data from general access.
• Participate in architectural reviews and threat modeling of systems and applications across IT teams.
• Oversee and perform security risk assessments and testing for new technologies and IT projects.
• Serve as an integral member of the Incident Response Team for all major, high-risk cybersecurity incidents, communicating risks and response recommendations to Information Security and IT leadership, impacted IT teams, and the Law department.
• Work with external law enforcement, physical security, Human Resources, Legal, and Finance to provide technical expertise regarding information security events and incidents.
• Document security requirements and controls, define how new technology impacts the current security posture, and provide input on security requirements for RFPs, SOWs, and other procurement documents.
• Support the Sr. Director of Global Information Security in developing periodic Board of Directors and Executive Management presentations.

DE&I and EEOC:

Inclusion & Diversity:

As a purpose-led, performance driven company, we strive to foster a culture of belonging based on respect, connection, openness and authenticity. We are committed to building and maintaining a workplace that celebrates the diversity of our associates, supporting them to bring their authentic selves to work every day.

If your experience is close to what we’re looking for, please consider applying. Experience comes in many forms, skills are transferable, and passion goes a long way. We know that diverse backgrounds and experiences make for the best problem-solving and creative thinking, which is why we’re dedicated to adding new perspectives to the team and encourage everyone to apply. We look forward to learning more about you.