Security Compliance Assessor

1 Week ago • All levels • Cyber Security • $59,280 PA - $62,400 PA

Job Summary

Job Description

The Security Compliance Assessor ensures the security and compliance of all information systems, data, and operations within Company 3's media and entertainment facilities. Responsibilities include drafting, maintaining, and reviewing GRC policies and procedures; conducting risk assessments and threat modeling; participating in internal and external audits; establishing and maintaining internal controls aligned with the NIST Cybersecurity Framework; developing and delivering security awareness training; and assisting in incident response. The role requires expertise in GRC frameworks, understanding of media and entertainment security challenges, and the ability to produce clear, concise audit reports with actionable recommendations.
Must have:
  • GRC framework experience
  • Risk assessment & threat modeling
  • Policy/procedure development
  • Internal/external audit experience
  • NIST Cybersecurity Framework knowledge
  • Security awareness training development
Good to have:
  • Incident response experience
  • Data privacy expertise (GDPR, CCPA)
  • Security certifications (CISSP, CISM, CISA)
  • Scripting/automation skills
  • Cloud security knowledge
  • Experience with industry-specific tools
Perks:
  • Comprehensive health, retirement, and insurance benefits (for eligible full-time employees)
  • Paid time off (for eligible full-time employees)

Job Details

Business Unit: Company 3
Position: Security Compliance Assessor
Location: Santa Monica, CA (Remote)
Hours of Operation: 9:00am - 6:00pm EST or PST
*Pay Range: $29.00 - $30.00 USD hourly


POSITION SUMMARY:
Company3/Method Studios (CO3/Method) is a global leader in media and entertainment services for film, video and online content.  With operations in Los Angeles, New York and around the globe, the company employs over 2,500 of the most talented, highly honored, and recognized artists and industry veterans worldwide.   
 

The Security Compliance Assessor is responsible for ensuring the security and compliance of all information systems, data, and operations within the media and entertainment facility. This role will play a critical part in maintaining a secure and reliable environment that aligns with industry best practices, including the Motion Picture Association (MPA) guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework 

MAIN DUTIES:
Governance, Risk & Compliance (GRC):  The Security Compliance Assessor will draft, maintain, and regularly review policies and procedures related to GRC for physical, administrative, and information systems (IS) environments. They will conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities, as well as monitor and analyze security incidents and implement appropriate response and remediation plans. 
Auditing & Compliance: The Security Compliance Assessor will participate in external audits of CO3 facilities and operations conducted by third-party auditors, conduct regular internal audits of studios to assess compliance with CO3 policies and industry standards, and daft comprehensive audit reports that clearly convey findings to systems owners and executives, including recommendations for corrective actions. 
Security Controls: They will establish and maintain internal controls aligned with the NIST Cybersecurity Framework to safeguard sensitive data and systems, and implement and manage security controls, including access control, intrusion detection/prevention systems, and data loss prevention measures. 

The Security Compliance Assessor will also be responsible for the following:
Security Awareness & Training:  
  • Develop and deliver comprehensive security awareness training programs for all employees, covering topics such as phishing, social engineering, and best practices for data handling and protection. 
  • Track employee training completion and maintain records of training activities. 
Incident Response:  
  • Participate in cybersecurity simulation events and tabletop exercises to test and refine incident response plans. 
  • Assist in the investigation and resolution of security incidents, including data breaches and cyberattacks.  
Stay Informed:  
  • Stay abreast of the latest security threats, vulnerabilities, and best practices in the media and entertainment industry. 
  • Maintain knowledge of relevant industry standards and regulations, including those related to data privacy (e.g., GDPR, CCPA). 

WHAT YOU BRING:
The ideal candidate will be experienced in the information systems or computer science field, and must have solid experience in developing, implementing, and maintaining GRC frameworks. This includes risk assessments, threat modeling, and policy/procedure development. They must be able to demonstrate a deep understanding of the unique security challenges and regulatory landscape within the media and entertainment sector and be experienced with conducting both internal and external audits, analyzing findings, and producing clear, concise reports with actionable recommendations. Additional desired skills include:
  • NIST Cybersecurity Framework Knowledge: Demonstrated understanding and ability to apply the NIST Cybersecurity Framework within a real-world setting. 
  • Communication & Collaboration: Excellent written and verbal communication skills are essential for interacting with various stakeholders (executives, technical teams, auditors). Must be comfortable speaking to large, diverse groups. Ability to convey complex information clearly and concisely. Ability to communicate with users of varying technical knowledge. 
  • Project Management: Ability to manage multiple projects simultaneously, prioritize tasks effectively, and meet deadlines. 
  • Adaptability: Ability to work under pressure in a dynamic environment. 
The following skills are considered an asset:
  • Incident Response Experience: Prior experience in incident response activities, including investigations, containment, and remediation. 
  • Data Privacy Expertise: Familiarity with relevant data privacy regulations (GDPR, CCPA, etc.) and how they impact the media and entertainment industry. 
  • Technical Certifications: Relevant security certifications (e.g., CISSP, CISM, CISA) are a plus. 
  • Scripting/Automation: Basic scripting skills (e.g., Python, PowerShell) can be beneficial for automating tasks and improving efficiency. 
  • Cloud Security Knowledge: Familiarity with cloud security concepts and best practices, particularly relevant to cloud-based media and entertainment services. 
  • Experience with industry-specific tools: Familiarity with tools commonly used in the media and entertainment industry for security monitoring, threat intelligence, or compliance management. 
  • Technical Proficiency: Familiarity with common security controls (access control, IDS/IPS, DLP), and an understanding of how these technologies work within the context f a media & entertainment organization. 
  • Technical Understanding: Understanding and experience with endpoint, application, and network security, identity and access management, incident response, and vulnerability management. 
  • Networking Expertise: Demonstrated knowledge of networking best-practices and security protocols. 

ABOUT THE COMPANY:
Company 3, including its various business units and family of brands, provides a full range of Creative Services for content creators, including conceptual design, pre-vis, look development, ideation and rapid prototyping, 3D animation/CGI, motion graphics/designers, matte painting, compositing, dailies and production services, color grading, post-production finishing, marketing/trailers, live-action production, experiences, and more.

Diversity and Inclusion at Company 3:

Creativity has diversity at its core. We celebrate the value of each unique experience by being dedicated to fostering the most diverse, equitable, and inclusive culture where every employee feels empowered and safe to show up to work as their full self.

It is our policy to provide equal employment opportunities to all applicants and employees. Please inform the Company's HR representative if you need assistance completing any forms or otherwise need any accommodation or support in order to participate in the application process.

*The listed pay range represents the lowest to highest range that we in good faith believe we would pay for this role at the time of this posting. This range may be modified in the future. An employee’s pay position within the range may be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, local currency exchange rates, performance, shift, travel requirements, sales or revenue-based metrics, applicable law, and business or organizational needs. 

The benefits for eligible part-time employees working 25 or more hours per week and full-time employees in the US include a comprehensive package of health, retirement, and insurance benefits and paid time off. The benefits for eligible project hires and part-time employees working less than 25 hours per week in the US include retirement, select insurance benefits, and where required by law, health benefits. For roles filled in Canada and other territories, local benefits plan offerings as adopted and amended from time to time will apply.

The above compensation and benefits information is provided in accordance with various state, provincial, and local pay transparency laws.

This position is for an existing vacancy. Both external and internal candidates can apply for this role through the Company’s Career Page. The Company generally only contacts those individuals who have submitted an application which it wishes to interview. The application window for this position is expected to close by May 15, 2025.

Similar Jobs

Zoox - Senior/Staff Data Scientist - Collision Avoidance System

Zoox

Foster City, California, United States (Hybrid)
4 Months ago
Ubisoft - Narrative Director

Ubisoft

Bordeaux, Nouvelle-Aquitaine, France (On-Site)
3 Weeks ago
Meta - Silicon Architect

Meta

Austin, Texas, United States (On-Site)
3 Months ago
NVIDIA - Research Intern, Deep Learning and Artificial Intelligence - 2025

NVIDIA

Taipei City, Taiwan (On-Site)
1 Month ago
The Walt Disney Company - Ride Control Hardware Engineer

The Walt Disney Company

Glendale, California, United States (On-Site)
5 Days ago
PwC - Cyber Manager

PwC

Bangkok, Bangkok, Thailand (On-Site)
4 Months ago
ByteDance - AI Security Researcher - Security - San Jose

ByteDance

San Jose, California, United States (On-Site)
3 Months ago
Reversing Labs - Security Solutions Architect (DACH Region)

Reversing Labs

Germany (Remote)
2 Months ago
PwC - ETIC, Cyber Risk - Senior Manager

PwC

Cairo, Cairo Governorate, Egypt (On-Site)
4 Months ago
Blue Yonder - Security Architect (Identity & Access Management)

Blue Yonder

Bengaluru, Karnataka, India (On-Site)
4 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Activate Games - Shipper/Receiver (Day Shift)

Activate Games

Rosser, Manitoba, Canada (On-Site)
1 Week ago
KLA - Associate Technical Lead/Technical Lead, C++

KLA

Chennai, Tamil Nadu, India (On-Site)
6 Months ago
Anavation - Senior iOS Software Engineer

Anavation

Chantilly, Virginia, United States (On-Site)
4 Months ago
Hudl - Product Design Manager

Hudl

Austin, Texas, United States (Remote)
3 Months ago
Globalization Partners - Senior Software Engineer

Globalization Partners

(Remote)
6 Days ago
Respawn Entertainment - Senior Systems Designer (Apex Legends)

Respawn Entertainment

Los Angeles, California, United States (On-Site)
5 Months ago
Purple Rock Scissors - Illustrator

Purple Rock Scissors

United States (On-Site)
6 Months ago
Hudl - Product Design Manager

Hudl

Dallas, Texas, United States (Remote)
3 Months ago
NVIDIA - Senior Software and System Architect

NVIDIA

Shanghai, Shanghai, China (On-Site)
1 Month ago
Nagarro - SAP FI/CO Consultant (all genders)

Nagarro

Austria (Remote)
4 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Santa Monica, California, United States

The Walt Disney Company - Principal Machine Learning Engineer, Research - Ad Platforms

The Walt Disney Company

Santa Monica, California, United States (On-Site)
3 Months ago
PENN Interactive - Manager, Analytics Reporting

PENN Interactive

Philadelphia, Pennsylvania, United States (Hybrid)
2 Months ago
Patel greene - STEP Intern

Patel greene

Bartow, Florida, United States (On-Site)
3 Months ago
Niantic - Product Policy & Compliance Specialist

Niantic

Sunnyvale, California, United States (Hybrid)
2 Months ago
Intrepid Studios,  Inc  - Helpdesk Support Technician

Intrepid Studios, Inc

San Diego, California, United States (On-Site)
6 Months ago
Nissan - Automotive Design Intern- Summer 2025- San Diego, CA

Nissan

San Diego, California, United States (On-Site)
4 Months ago
The Walt Disney Company - Sr. Product Designer

The Walt Disney Company

New York, New York, United States (On-Site)
2 Months ago
PlayStation Global - Director, Global Compliance & Ethics Lead

PlayStation Global

Aliso Viejo, California, United States (Hybrid)
4 Days ago
Google - Digital Sales Representative, Public Sector

Google

Reston, Virginia, United States (On-Site)
1 Month ago
The Walt Disney Company - Senior Machine Learning Engineer

The Walt Disney Company

New York, New York, United States (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

PwC - Risk Services - Communication and Marketing Specialist

PwC

Singapore (On-Site)
4 Months ago
Rackspace Technology - SOC Lead (Sentinel experience required)

Rackspace Technology

India (Remote)
3 Weeks ago
PwC - Cybersecurity Senior Associate

PwC

Makati, Metro Manila, Philippines (On-Site)
4 Months ago
Infoblox - Staff Software Engineer

Infoblox

California, United States (Hybrid)
2 Months ago
Microsoft - Digital Technology Specialists - Security - French Speaker

Microsoft

Dublin, County Dublin, Ireland (Hybrid)
1 Month ago
ION - Cyber Security Analyst, Italy

ION

Turin, Piedmont, Italy (On-Site)
4 Months ago
Plarium - SecOps Team Lead

Plarium

Herzliya, Tel Aviv District, Israel (On-Site)
2 Weeks ago
Interactive Brokers - Senior Cloud Security Engineer

Interactive Brokers

Greenwich, Connecticut, United States (Hybrid)
4 Months ago
Forescout Technologies  Inc  - Federal / FedRAMP Product Manager

Forescout Technologies Inc

United States (On-Site)
2 Months ago
Seedify - Cyber Security Specialist

Seedify

(On-Site)
8 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Company 3 is a comprehensive postproduction facility for features, episodic, commercials, and music videos. Known for its creative color artistry, pioneering technology, and global reach, Company 3 is trusted to deliver a quality product every time. It is home to one of the largest and most talented pools of colorists and visual effects artists working in post-production today with a client list that includes many of the most respected and talented film and entertainment professionals in the industry.


Company 3 offers solutions-based services ranging from color correction, Digital Intermediate (DI), and file-based workflows to visual effects and online services. Through its virtual outposts, Company 3 Colorists are available to clients around the world.

Santa Monica, California, United States (On-Site)

Santa Monica, California, United States (On-Site)

Los Angeles, California, United States (On-Site)

Los Angeles, California, United States (On-Site)

New York, New York, United States (On-Site)

Los Angeles, California, United States (On-Site)

New York, New York, United States (Hybrid)

United States (Remote)

New York, New York, United States (Remote)

Toronto, Ontario, Canada (Remote)

View All Jobs

Get notified when new jobs are added by Company3 Method Studios

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug