Security Compliance Assessor
Job Summary
Job Description
The Security Compliance Assessor ensures the security and compliance of all information systems, data, and operations within Company 3's media and entertainment facilities. Responsibilities include drafting, maintaining, and reviewing GRC policies and procedures; conducting risk assessments and threat modeling; participating in internal and external audits; establishing and maintaining internal controls aligned with the NIST Cybersecurity Framework; developing and delivering security awareness training; and assisting in incident response. The role requires expertise in GRC frameworks, understanding of media and entertainment security challenges, and the ability to produce clear, concise audit reports with actionable recommendations.
Must have:
- GRC framework experience
- Risk assessment & threat modeling
- Policy/procedure development
- Internal/external audit experience
- NIST Cybersecurity Framework knowledge
- Security awareness training development
Good to have:
- Incident response experience
- Data privacy expertise (GDPR, CCPA)
- Security certifications (CISSP, CISM, CISA)
- Scripting/automation skills
- Cloud security knowledge
- Experience with industry-specific tools
Perks:
- Comprehensive health, retirement, and insurance benefits (for eligible full-time employees)
- Paid time off (for eligible full-time employees)
13 skills required
Job Details
Business Unit: Company 3
Position: Security Compliance Assessor
Location: Santa Monica, CA (Remote)
Hours of Operation: 9:00am - 6:00pm EST or PST
*Pay Range: $29.00 - $30.00 USD hourly
POSITION SUMMARY:
Company3/Method Studios (CO3/Method) is a global leader in media and entertainment services for film, video and online content. With operations in Los Angeles, New York and around the globe, the company employs over 2,500 of the most talented, highly honored, and recognized artists and industry veterans worldwide.
The Security Compliance Assessor is responsible for ensuring the security and compliance of all information systems, data, and operations within the media and entertainment facility. This role will play a critical part in maintaining a secure and reliable environment that aligns with industry best practices, including the Motion Picture Association (MPA) guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework
MAIN DUTIES:
Governance, Risk & Compliance (GRC): The Security Compliance Assessor will draft, maintain, and regularly review policies and procedures related to GRC for physical, administrative, and information systems (IS) environments. They will conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities, as well as monitor and analyze security incidents and implement appropriate response and remediation plans.
Auditing & Compliance: The Security Compliance Assessor will participate in external audits of CO3 facilities and operations conducted by third-party auditors, conduct regular internal audits of studios to assess compliance with CO3 policies and industry standards, and daft comprehensive audit reports that clearly convey findings to systems owners and executives, including recommendations for corrective actions.
Security Controls: They will establish and maintain internal controls aligned with the NIST Cybersecurity Framework to safeguard sensitive data and systems, and implement and manage security controls, including access control, intrusion detection/prevention systems, and data loss prevention measures.
The Security Compliance Assessor will also be responsible for the following:
Security Awareness & Training:
WHAT YOU BRING:
The ideal candidate will be experienced in the information systems or computer science field, and must have solid experience in developing, implementing, and maintaining GRC frameworks. This includes risk assessments, threat modeling, and policy/procedure development. They must be able to demonstrate a deep understanding of the unique security challenges and regulatory landscape within the media and entertainment sector and be experienced with conducting both internal and external audits, analyzing findings, and producing clear, concise reports with actionable recommendations. Additional desired skills include:
ABOUT THE COMPANY:
Company 3, including its various business units and family of brands, provides a full range of Creative Services for content creators, including conceptual design, pre-vis, look development, ideation and rapid prototyping, 3D animation/CGI, motion graphics/designers, matte painting, compositing, dailies and production services, color grading, post-production finishing, marketing/trailers, live-action production, experiences, and more.
Diversity and Inclusion at Company 3:
Creativity has diversity at its core. We celebrate the value of each unique experience by being dedicated to fostering the most diverse, equitable, and inclusive culture where every employee feels empowered and safe to show up to work as their full self.
It is our policy to provide equal employment opportunities to all applicants and employees. Please inform the Company's HR representative if you need assistance completing any forms or otherwise need any accommodation or support in order to participate in the application process.
*The listed pay range represents the lowest to highest range that we in good faith believe we would pay for this role at the time of this posting. This range may be modified in the future. An employee’s pay position within the range may be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, local currency exchange rates, performance, shift, travel requirements, sales or revenue-based metrics, applicable law, and business or organizational needs.
The benefits for eligible part-time employees working 25 or more hours per week and full-time employees in the US include a comprehensive package of health, retirement, and insurance benefits and paid time off. The benefits for eligible project hires and part-time employees working less than 25 hours per week in the US include retirement, select insurance benefits, and where required by law, health benefits. For roles filled in Canada and other territories, local benefits plan offerings as adopted and amended from time to time will apply.
The above compensation and benefits information is provided in accordance with various state, provincial, and local pay transparency laws.
This position is for an existing vacancy. Both external and internal candidates can apply for this role through the Company’s Career Page. The Company generally only contacts those individuals who have submitted an application which it wishes to interview. The application window for this position is expected to close by May 15, 2025.
Position: Security Compliance Assessor
Location: Santa Monica, CA (Remote)
Hours of Operation: 9:00am - 6:00pm EST or PST
*Pay Range: $29.00 - $30.00 USD hourly
POSITION SUMMARY:
Company3/Method Studios (CO3/Method) is a global leader in media and entertainment services for film, video and online content. With operations in Los Angeles, New York and around the globe, the company employs over 2,500 of the most talented, highly honored, and recognized artists and industry veterans worldwide.
The Security Compliance Assessor is responsible for ensuring the security and compliance of all information systems, data, and operations within the media and entertainment facility. This role will play a critical part in maintaining a secure and reliable environment that aligns with industry best practices, including the Motion Picture Association (MPA) guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework
MAIN DUTIES:
Governance, Risk & Compliance (GRC): The Security Compliance Assessor will draft, maintain, and regularly review policies and procedures related to GRC for physical, administrative, and information systems (IS) environments. They will conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities, as well as monitor and analyze security incidents and implement appropriate response and remediation plans.
Auditing & Compliance: The Security Compliance Assessor will participate in external audits of CO3 facilities and operations conducted by third-party auditors, conduct regular internal audits of studios to assess compliance with CO3 policies and industry standards, and daft comprehensive audit reports that clearly convey findings to systems owners and executives, including recommendations for corrective actions.
Security Controls: They will establish and maintain internal controls aligned with the NIST Cybersecurity Framework to safeguard sensitive data and systems, and implement and manage security controls, including access control, intrusion detection/prevention systems, and data loss prevention measures.
The Security Compliance Assessor will also be responsible for the following:
Security Awareness & Training:
- Develop and deliver comprehensive security awareness training programs for all employees, covering topics such as phishing, social engineering, and best practices for data handling and protection.
- Track employee training completion and maintain records of training activities.
- Participate in cybersecurity simulation events and tabletop exercises to test and refine incident response plans.
- Assist in the investigation and resolution of security incidents, including data breaches and cyberattacks.
- Stay abreast of the latest security threats, vulnerabilities, and best practices in the media and entertainment industry.
- Maintain knowledge of relevant industry standards and regulations, including those related to data privacy (e.g., GDPR, CCPA).
WHAT YOU BRING:
The ideal candidate will be experienced in the information systems or computer science field, and must have solid experience in developing, implementing, and maintaining GRC frameworks. This includes risk assessments, threat modeling, and policy/procedure development. They must be able to demonstrate a deep understanding of the unique security challenges and regulatory landscape within the media and entertainment sector and be experienced with conducting both internal and external audits, analyzing findings, and producing clear, concise reports with actionable recommendations. Additional desired skills include:
- NIST Cybersecurity Framework Knowledge: Demonstrated understanding and ability to apply the NIST Cybersecurity Framework within a real-world setting.
- Communication & Collaboration: Excellent written and verbal communication skills are essential for interacting with various stakeholders (executives, technical teams, auditors). Must be comfortable speaking to large, diverse groups. Ability to convey complex information clearly and concisely. Ability to communicate with users of varying technical knowledge.
- Project Management: Ability to manage multiple projects simultaneously, prioritize tasks effectively, and meet deadlines.
- Adaptability: Ability to work under pressure in a dynamic environment.
- Incident Response Experience: Prior experience in incident response activities, including investigations, containment, and remediation.
- Data Privacy Expertise: Familiarity with relevant data privacy regulations (GDPR, CCPA, etc.) and how they impact the media and entertainment industry.
- Technical Certifications: Relevant security certifications (e.g., CISSP, CISM, CISA) are a plus.
- Scripting/Automation: Basic scripting skills (e.g., Python, PowerShell) can be beneficial for automating tasks and improving efficiency.
- Cloud Security Knowledge: Familiarity with cloud security concepts and best practices, particularly relevant to cloud-based media and entertainment services.
- Experience with industry-specific tools: Familiarity with tools commonly used in the media and entertainment industry for security monitoring, threat intelligence, or compliance management.
- Technical Proficiency: Familiarity with common security controls (access control, IDS/IPS, DLP), and an understanding of how these technologies work within the context f a media & entertainment organization.
- Technical Understanding: Understanding and experience with endpoint, application, and network security, identity and access management, incident response, and vulnerability management.
- Networking Expertise: Demonstrated knowledge of networking best-practices and security protocols.
ABOUT THE COMPANY:
Company 3, including its various business units and family of brands, provides a full range of Creative Services for content creators, including conceptual design, pre-vis, look development, ideation and rapid prototyping, 3D animation/CGI, motion graphics/designers, matte painting, compositing, dailies and production services, color grading, post-production finishing, marketing/trailers, live-action production, experiences, and more.
Diversity and Inclusion at Company 3:
Creativity has diversity at its core. We celebrate the value of each unique experience by being dedicated to fostering the most diverse, equitable, and inclusive culture where every employee feels empowered and safe to show up to work as their full self.
It is our policy to provide equal employment opportunities to all applicants and employees. Please inform the Company's HR representative if you need assistance completing any forms or otherwise need any accommodation or support in order to participate in the application process.
*The listed pay range represents the lowest to highest range that we in good faith believe we would pay for this role at the time of this posting. This range may be modified in the future. An employee’s pay position within the range may be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, local currency exchange rates, performance, shift, travel requirements, sales or revenue-based metrics, applicable law, and business or organizational needs.
The benefits for eligible part-time employees working 25 or more hours per week and full-time employees in the US include a comprehensive package of health, retirement, and insurance benefits and paid time off. The benefits for eligible project hires and part-time employees working less than 25 hours per week in the US include retirement, select insurance benefits, and where required by law, health benefits. For roles filled in Canada and other territories, local benefits plan offerings as adopted and amended from time to time will apply.
The above compensation and benefits information is provided in accordance with various state, provincial, and local pay transparency laws.
This position is for an existing vacancy. Both external and internal candidates can apply for this role through the Company’s Career Page. The Company generally only contacts those individuals who have submitted an application which it wishes to interview. The application window for this position is expected to close by May 15, 2025.
Similar Jobs
ByteDance
Mountain View, California, United States (On-Site)
• 5 Months ago
Riot Games
Los Angeles, California, United States (On-Site)
• 2 Months ago
PwC
Gurugram, Haryana, India (On-Site)
• 6 Months ago
PwC
Mumbai, Maharashtra, India (On-Site)
• 6 Months ago
PwC
Pointe-Noire, Kouilou, Republic Of The Congo (On-Site)
• 6 Months ago
Axinous
California, United States (Remote)
• 1 Month ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
The Walt Disney Company
Orlando, Florida, United States (On-Site)
• 2 Months ago
Meta
New York, New York, United States (Remote)
• 5 Months ago
Company3 Method Studios
British Columbia, Canada (On-Site)
• 1 Month ago
Get notifed when new similar jobs are uploaded
Jobs in Santa Monica, California, United States
Next Level Business Services
San Diego, California, United States (On-Site)
• 6 Months ago
The Walt Disney Company
New York, New York, United States (On-Site)
• 3 Months ago
The Walt Disney Company
New York, New York, United States (On-Site)
• 2 Months ago
Netflix
Los Angeles, California, United States (On-Site)
• 3 Months ago
Netflix
New York, New York, United States (On-Site)
• 3 Months ago
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
Tesla
Milton Keynes, England, United Kingdom (On-Site)
• 2 Months ago
PwC
Bengaluru, Karnataka, India (On-Site)
• 6 Months ago
The Walt Disney Company
Burbank, California, United States (On-Site)
• 2 Months ago
Blinkhealth
India (On-Site)
• 4 Months ago
Get notifed when new similar jobs are uploaded
About The Company
Company 3 is a comprehensive postproduction facility for features, episodic, commercials, and music videos. Known for its creative color artistry, pioneering technology, and global reach, Company 3 is trusted to deliver a quality product every time. It is home to one of the largest and most talented pools of colorists and visual effects artists working in post-production today with a client list that includes many of the most respected and talented film and entertainment professionals in the industry.
Company 3 offers solutions-based services ranging from color correction, Digital Intermediate (DI), and file-based workflows to visual effects and online services. Through its virtual outposts, Company 3 Colorists are available to clients around the world.
Get notified when new jobs are added by Company3 Method Studios
