Director of Information Security, Productions
About the job
SummaryBy Outscal
The Information Security organization at Sony Pictures Entertainment is responsible for protecting our content, systems and data from being stolen, damaged or destroyed. To do so, we are constantly improving our tools, capabilities and processes.
The Director of Information Security, Productions is accountable for overseeing our information security posture and providing clear, data-driven insight into InfoSec risk across all Sony Pictures Entertainment productions worldwide to support effective decision-making by our partners in production, content distribution, IT and throughout our business. Success will require developing and maintaining strong working relationships across the company, and leveraging the full capabilities of our Information Security and IT organizations to provide the best possible solutions to meet the needs of SPE movies and television productions. This role will also be accountable for identifying key process indicators across our production portfolios to determine where we have Information Security risk that it out of alignment with business expectations. Finally, it will require a strong familiarity with movie- and television-making standard tools and processes in order to effectively meet our production team needs.
Key indicators of success in this role will be:
Business leaders have near real-time visibility into Information Security risk across our entire production portfolio, using metrics that are widely regarded as meaningful by our business partners, and that support timely and effective decision-making, at the right levels in the organization, to mitigate risk where needed.
Sony Pictures Entertainment has an industry leading set of technology tools supporting our productions, that have information security built in without creating unnecessary user friction.
Our production teams trust Sony Pictures to provide a secure digital workplace that is highly available, easy to use and keeps our data and content secure.
Information Security, Physical Security/Safety and Information Technology work as unified partners to support and secure our motion picture and television productions from concept to distribution.
Within this organization, we value learning and agility, and empowering our teams to deliver positive outcomes. The Director of Information Security, Productions will be a key contributor to our success in supporting the most essential functions of our core business and establishing SPE and Sony as leaders in Production Security.
Responsibilities:
Provide transparency into the Information Security risk profile – focusing on actionable information – of our world-wide active production portfolio, including all subsidiaries and controlled joint ventures.
Provide guidance on the needs of our production teams to Information Security Risk, Awareness, Architecture, Governance and Compliance teams.
Communicate production and content risk appropriately and effectively at all levels of the business.
Partner with Productions Security and Safety to flag all production incidents that have Information Security components in order to accurately report on overall risk and uncover trends to drive continual program improvement.
With IT and Physical Security, continually evolve the security controls in place for productions to most effectively meet our business goals.
Ensure that our security architecture and production technology teams build security into our production technology stacks.
Ensure security controls enable effective business operations by securing confidential information and content without creating undue friction for end users.
Ensure it remains current and effective in mitigating emerging threats.
Promote a high-trust culture of security across Sony Pictures Entertainment productions in support of our goal of being the most trusted studio in the industry.
Be accountable for developing and maintaining production security policies, standards and procedures that take into account the needs of our business partners.
Work with Security Awareness team to develop documentation and training materials appropriate for production team members.
When needed, participate in incident response activities by supporting our Incident Response team and ensuring effectively and timely communications between IR and business stakeholders. Ensure follow-up on action items coming out of incident learnings.
Requirements:
10+ years of experience in Information Security, Information Technology or a related field
10+ years of experience in an organization directly involved in movie, television and/or other entertainment production, or equivalent educational experience
Strong understanding of the technologies, tools and processes used in production of movies and/or television.
Knowledge of Information Security frameworks, standards and best practices and their relevance to business success
Specific knowledge of processes, tools and practices used to maintain confidentiality in the context of movie and television productions.
Demonstrated ability to partner with business leaders to create and maintain information security policies, practices and procedures.
Ability to develop and maintain meaningful metrics to track program and process effectiveness.
Strong planning and analytical skills
Strong communications skills
Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.
SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.
To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.
