VP IT Cyber Security

Security Executive Council; Katy, Northern (TX, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Academy Sports + Outdoors is actively seeking a seasoned cybersecurity executive to protect systems, data, and digital capabilities across our enterprise. You will align security decisions with business strategy, directing a comprehensive program that covers risk, governance, and resilience for stores, distribution, and digital channels.

You will lead multi-year cybersecurity and information security strategies, partner with senior leaders, and build a high‑performing security organization

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field required
• Advanced degree preferred
• 15+ years of progressive cybersecurity leadership
• 7+ years leading enterprise security organizations
• Prior service as a VP Cybersecurity, CISO, or in an equivalent executive role
• Background supporting a large retailer, consumer-facing company, or similarly complex enterprise
• Proven ability to partner with executive leaders and cross-functional teams
• Retail or large consumer-focused business background strongly preferred
• Professional certifications such as CISSP, CISM, or CISA strongly preferred
• Strong understanding of cybersecurity, IT controls, and governance
• Executive presence with the ability to influence senior leaders
• Ability to connect security decisions to business outcomes
• Strategic and practical decision-making that balances protection and performance
• Strong communication, leadership, and organizational skills
• A team-first attitude; while your core duties are your priority, you're happy to step in wherever you're needed

Responsibilities

• Develop and execute multi-year cybersecurity and information security strategies.
• Establish practical policies and governance and prioritize investments based on risk.
• Lead cyber risk management, regulatory readiness, security compliance, identity security, threat detection, and vulnerability management.
• Maintain and test incident response, ransomware response, crisis management, disaster recovery, and business continuity programs.
• Lead executive response during significant incidents and manage budgets and operating plans.

Skills

Cybersecurity Leadership

Executive Presence

Risk Management

Incident Response

Security Strategy

Stakeholder Communication

Vendor Management

Governance & Compliance

Regulatory Knowledge

Education

Bachelor's degree

Advanced degree preferred

CISSP/CISM/CISA preferred

Job description

About the job

Who We Are

At Academy Sports + Outdoors our vision is to be the best sports + outdoors retailer in the country — but what truly sets us apart is our people. We’re a passionate, purpose-driven team that’s as committed to each other as we are to our customers.

We’ve spent over 80 years building a culture that puts people first. We believe in creating opportunities for growth, fostering meaningful connections, and supporting every Team Member’s journey. What fuels us? Our belief in the power of fun.

Here, you won’t just help customers gear up for their next adventure — you’ll launch one of your own. Whether you're starting out or leveling up, Academy is a place where fun can’t lose!

What You Will Work On

In this role, you protect the systems, data, and digital capabilities that keep Academy Sports + Outdoors operating and growing. Your leadership helps ensure the technology supporting stores, distribution centers, corporate teams, and digital channels is secure, reliable, and resilient. By connecting cybersecurity decisions to business strategy and enterprise risk, you help the company pursue innovation while maintaining strong protection and operational continuity.

Working across the enterprise, you develop and execute multi-year cybersecurity and information security strategies, establish practical policies and governance, and prioritize investments based on business impact and risk. You lead cyber risk management, regulatory readiness, security compliance, identity security, threat detection, vulnerability management, threat intelligence, cyber defense, and Security Operations Center capabilities. You also maintain and test incident response, ransomware response, crisis management, disaster recovery, and business continuity programs, lead executive response during significant incidents, manage security budgets and operating plans, evaluate security technologies, and build a leadership team focused on execution and continuous improvement.

Who You Will Work With

As a senior IT leader and peer to other IT Vice Presidents, you partner closely with Technology and business leaders to embed security into how work gets done without slowing the business down. You lead the cybersecurity organization through the Director, IT Security and Compliance, setting direction, priorities, expectations, and accountability while developing leadership talent and organizational readiness.

You collaborate with Internal Audit, Legal, Compliance, Privacy, Enterprise Risk Management, Digital, Infrastructure and Operations, Enterprise Architecture, Applications, and EPMO leaders. You also serve as a trusted advisor to executive leadership, the Audit Committee, and the Board, presenting cyber risk posture, metrics, trends, regulatory matters, resilience priorities, emerging threats, and investment decisions in clear business terms.

Qualifications:

What You Bring

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field required
• Advanced degree preferred
• 15+ years of progressive cybersecurity leadership
• 7+ years leading enterprise security organizations
• Prior service as a VP Cybersecurity, CISO, or in an equivalent executive role
• Background supporting a large retailer, consumer-facing company, or similarly complex enterprise
• Proven ability to partner with executive leaders and cross-functional teams
• Retail or large consumer-focused business background strongly preferred
• Professional certifications such as CISSP, CISM, or CISA strongly preferred
• Strong understanding of cybersecurity, IT controls, and governance
• Executive presence with the ability to influence senior leaders
• Ability to connect security decisions to business outcomes
• Strategic and practical decision-making that balances protection and performance
• Strong communication, leadership, and organizational skills
• A team-first attitude; while your core duties are your priority, you're happy to step in wherever you're needed

Work Style & Physical Requirements

• Ability to work flexible hours as needed to support critical business or security events
• Regular in-office attendance is required
• Acceptable level of hearing and vision to perform job duties
• Ability to adhere to company policies and professional standards

Key Skills

Security Policy Development, Security Operations Management, Business Continuity Crisis Management, Identity Systems, Budgeting and Forecasting, Executive Level Presentations, Strategy and Execution

We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.