Director of Security - Lottery Division

The Colorado Department of Revenue (CDOR) is dedicated to becoming a trusted partner to every Coloradan, helping them navigate government complexities to thrive. Guided by values of service, teamwork, accountability, integrity, and respect, CDOR empowers businesses and individuals through quality customer service, innovation, and collaboration. The department celebrates diversity and fosters an equitable, inclusive culture.

About the role

The Colorado Lottery, a division of CDOR, maximizes proceeds from Lottery game sales to support Colorado beneficiaries. Headquartered in Pueblo with satellite offices in Denver, Fort Collins, and Grand Junction, the Lottery operates through Administration, Sales, Marketing, Security & Investigations, Fiscal, Operations, and Development units.

The Director of Security leads the Security & Investigations unit, ensuring the physical and logical security, integrity, and regulatory compliance of Lottery operations. This role provides leadership and oversight for cybersecurity, criminal investigations, retailer licensing, background investigations, warehouse operations, and security-related vendor and contract management.

Responsibilities

• Provide leadership, management, and oversight of the Security & Investigations unit, including Cybersecurity, Criminal Investigations & Compliance, Licensing, and Warehouse operations.
• Exercise delegated appointing authority; oversee employee performance, staffing, hiring, operational planning, performance standards, and resolution of employee matters.
• Develop and implement security policies, standards, procedures, operational plans, and performance measures aligned with the Lottery’s strategic objectives.
• Oversee criminal investigations, retailer compliance, licensing operations, background investigations, and enforcement of applicable laws, rules, regulations, policies, and procedures.
• Direct the Lottery’s physical and logical security strategy, including security of gaming systems, facilities, surveillance, system access, and vendor operations.
• Ensure compliance with security requirements and oversee preparation for security-related audits, including resolution of audit findings.
• Collaborate with cybersecurity staff and internal/external partners to identify and respond to physical and cybersecurity threats, vulnerabilities, and breaches.
• Serve as a liaison with law enforcement agencies, judicial districts, the Attorney General’s Office, vendors, and other external partners on security, investigative, and regulatory matters.
• Oversee security-related vendors, contracts, purchase orders, and services, including management of the Lottery’s statewide Scratch Ticket courier contract.
• Advise Lottery senior leadership on significant security, investigative, licensing, compliance, operational, and vendor-related matters; recommend appropriate courses of action.

Requirements

• Residency in the State of Colorado at the time of application.
• Ten (10) years of professional experience in Cybersecurity, Information Security, Information Technology, or a closely related field, including:
  • Five (5) years of cybersecurity leadership experience.
  • Five (5) years of experience managing or supervising a team of six or more employees.
• A combination of relevant education (Computer Science, Cybersecurity, Information Technology, Management Information Systems, Business Administration, Management, or a closely related field) and professional experience totaling ten (10) years may substitute for the experience-only requirement, provided the five (5) years of leadership and supervisory experience are met.
• Detailed documentation of experience in the application is required; it will not be inferred or assumed.
• Must undergo a conflict-of-interest assessment per C.R.S.44-40-110 and maintain compliance for the duration of employment.
• Willingness to work occasional weekends and holidays, travel overnight, and lift up to 20 lbs.
• Possess and maintain a valid Colorado driver’s license.
• Applicants and immediate family members must comply with restrictions on Lottery game play and conflicts of interest.
• Pre-employment evaluation of tax records/accounts to ensure compliance with Colorado Individual Income Tax (CIIT) obligations.
• Successful background investigation and reference check prior to appointment; certain positions may require scheduled background investigations.
• Maintain a safe driving record and valid driver’s license if required to drive a State-owned vehicle.

Preferred Qualifications

• CISSP certification (preferred but not required).
• Experience designing and architecting information technology and security controls across complex, diverse networks, applications, and infrastructures.
• Technical aptitude, critical thinking, and ability to innovate in solving complex information security problems.
• Ability to translate technical risk issues for business leaders and upper management.
• Experience designing security in environments undergoing IT transitions or upgrades.
• Understanding of the information security and IT risk management solutions market, including vendor options across broad security domains.
• Working knowledge of application security controls, common threats, and cost-effective implementation of mitigating controls.
• Strategic thinking, exceptional attention to detail, and strong organizational skills.
• Understanding of information risk management frameworks, regulations, data protection guidelines, and standards.

Benefits

• PERA retirement benefits, including Defined Benefit Plan, Defined Contribution Plan, plus 401K and 457 plans.
• Medical, dental, and vision insurance coverage.
• Automatic Short-Term and Optional Long-Term Disability Coverage.
• Life and AD&D Insurance.
• Flexible Spending Accounts (FSAs).
• Family Medical Leave Act (FMLA) job protection and State of Colorado Paid Family Medical Leave (PFML).
• 11 paid holidays annually.
• Accrued annual and sick leave.
• Variety of discounts on services and products through the State of Colorado’s Work-Life Employment Discount Program.