Jason Payton
About Jason Payton
Jason Payton serves as the Director of Cybersecurity Risk Management at Churchill Downs Incorporated, where he has worked since 2023. With over 21 years of experience in technology and cybersecurity, he specializes in developing information security policies and ensuring regulatory compliance.
Work at Churchill Downs Incorporated
Jason Payton currently serves as the Director of Cybersecurity Risk Management at Churchill Downs Incorporated, a position he has held since 2023. In this role, he focuses on overseeing cybersecurity strategies and risk management practices to protect the organization's digital assets. Prior to this role, he worked at Churchill Downs as the Information Security Officer and Risk Management Team Lead from 2020 to 2023, where he was responsible for developing and implementing information security policies.
Previous Experience in Cybersecurity
Before joining Churchill Downs, Jason Payton accumulated extensive experience in the cybersecurity field. He worked as the Information Security Officer/Manager at Passport Health Plan from 2012 to 2020, where he managed information security initiatives. His earlier roles include serving as an Information Security/HIPAA Security Officer at Seven Counties Services and as an Information Security Analyst at L&N Federal Credit Union, where he contributed to the development of security protocols.
Education and Expertise
Jason Payton holds a Bachelor's degree in Computer Science and an Associate degree in Business from Indiana University Southeast. His educational background supports his over 21 years of experience in technology, cybersecurity, and compliance. He possesses strong analytical and critical thinking skills, which enable him to collaborate effectively across teams to develop common solutions. His expertise includes creating information security policies and ensuring compliance with regulatory standards.
Technical Skills in Cybersecurity
Jason Payton has developed a robust skill set in various technical areas of cybersecurity. He is well-versed in network security, mobile and systems security, vulnerability assessment and remediation, security information/event management, and encryption methodologies. His ability to translate complex technical topics into standard business language allows for effective communication across all organizational levels, enhancing the overall cybersecurity posture of the organizations he has worked with.