Information Security Lead

About BOA

BOA® Technology builds the scientifically proven and patented BOA® Fit System. BOA partners with market-leading brands to make the best gear even better. Each unique configuration is engineered with performance fit at the center to create a precise fit and better connection between an athlete and their equipment - improving performance.

BOA® Technology Inc. is headquartered in Denver, Colorado with offices in Austria, Hong Kong, Greater China, South Korea, and Japan. For more information, visit

Final date to receive applications

Applications will be accepted through 11/19/26, after which we will begin candidate review. If the deadline is extended, we will update this posting.

Overview of Role

Reporting to the Director of Business Systems and IT, the Information Security Lead coordinates and advances BOA's global cybersecurity program, focusing primarily on Information Systems Governance/Risk/Compliance (GRC) and day-to-day security operations.

Working closely with IT Operations and Business Systems Analysts, this position supports the development and execution of BOA's security roadmap, maintains security policies and controls, coordinates security assessments and audits, tracks identified risks, and drives remediation activities.

The role combines security program coordination with hands-on operational responsibilities, including triaging security alerts, supporting incident response, facilitating access reviews, managing vulnerability remediation workflows, and delivering employee security awareness initiatives.

Core Responsibilities

• Reflect and role model BOA’s vision, values and Leadership Model and demonstrate passion for our mission across the IT team and rest of the organization
• Support the development and execution of BOA’s information security strategy and multi-year roadmap in partnership with the Director of Business Systems and IT.
• Assess security program maturity using NIST CSF 2.0; coordinate annual independent security assessments and audits; document, prioritize, and track findings through remediation closure.
• Develop and maintain enterprise security policies, standards, and procedures; manage the information security risk register, risk management plans, and documented exception process across global operations.
• Oversee identity and access governance, including periodic user access reviews, privileged access oversight, and segregation of duties (SoD), providing an independent control-review perspective.
• Serve as the primary information security contact for internal and external auditors; coordinate control evidence and support SOX ITGC testing and remediation.
• Manage third-party cyber risk through vendor assessments, review of vendor security reports and other assurance materials, and follow-up on identified gaps.
• Lead global security awareness initiatives, including phishing simulations and practical guidance on social engineering, data protection, and secure use of software systems and tools.
• Lead the vulnerability management process: evaluate exposure and business impact, establish remediation priorities and timelines, coordinate with IT Operations, and verify corrective actions.
• Oversee security monitoring coverage and investigate or triage security alerts, events, and tickets; collaborate with external security service providers and internal technical teams as needed.
• Maintain and exercise incident response procedures; coordinate investigations, escalation, containment, recovery, and lessons learned. Partner with IT Operations on disaster recovery exercises and resilience testing.
• Define and report meaningful security metrics, control effectiveness, program progress, and material risks to IT and company leadership; advise on security requirements for technology and…