VP, Product Security

Job Description

The VP, Product Security oversees all information security efforts for Warner Bros. Discovery's digital platforms, revenue-generating business systems across the globe.

This role is specialized in and is accountable for information security relevant to Direct-to-Consumer (DTC), customer-facing technologies, appropriate protection of user and customer information. The VP will drive translation and successful execution of cyber security requirements, and lead resolution of Digital Platform and business-related systems security issues in fast-paced global environments.

The VP of Product Security will be an important member of Warner Bros. Discovery's Global Information and Content Security (GISC) team and collaborate with Global Direct to Consumer (DTC) and Broadcast teams on initiatives to design and deploy appropriate, risk-based security technical security controls to protect consumer data, services, and technology assets of Warner Bros. Discovery's portfolio. The role will focus on product security for our streaming media services and other supporting businesses. This leader will work closely with development and engineering teams to ensure secure architectures, patterns, and solutions are created and maintained. The person taking this position will strive to lead from the front, growing a strong team of engineers through fantastic communication and collaboration.

This VP will report directly to the SVP, Product, Application and Cloud Security and will act as second-in-command for that organization.

If you:
• Are passionate about consumer facing web, tv, and mobile application security
• Are driven to mentor and grow a team of skilled practitioners
• Are excited to work in an international, face-paced company with a large suite of products
• Think security is a feature of a product and not a compliance checkbox
• Want to help implement and mature a robust product security program at scale
• Join us!

Responsibilities:
• Lead a global and diverse team.
• Drive a program that can conduct product security risk assessments, analysis, and monitoring at scale.
• Develop and grow the Product Security programs in areas such as security architecture engagement strategies, product threat modeling at scale and security technical champion's program.
• Deliver strategic quarterly roadmap plans and effectively lead the successful completion of initiatives on-time and with high quality.
• Lead a team to perform design analysis, review, piloting, and selection of security technologies that meet specified application/business requirements, as needed.
• Identify and define security requirements and security baselines for the various classes of assets and environments in use at Warner Bros. Discovery or its partners.
• Work collaboratively and proactively across the organization (e.g., Technical Architects/Leads, Product
managers, Digital Media Program Teams, etc.) to support the remediation security gaps.
• Review technical architectures that deliver to a wide array of client delivery platforms
• Understand and recommend security controls for the rapid development of consumer-facing
prototypes to identify technical options and inform architectural approaches.
• Identify and recommend best-of-breed security stack and controls for interactive consumer
experiences across web and mobile devices. (i.e., project, customer, and vendor management skills)
• Engage assigned business lines as the central point-of-contact for information security controls.
• Manage relationships effectively, advocating for business and external customers by engaging in security-related requirements conversations, seeking understanding of control requirements for presenting to IT security solution architects
• Advocate for the company's security initiatives and controls deployment. Stay knowledgeable about the company's technical controls and advocates for the technical security control needed by assigned business.
• Promote and evangelize the company's Security Policies and Standards. Advise stakeholders on security deviation control alternatives, such as compensating controls, and leads stakeholders through the policy deviation process.

Qualifications:
• Hybrid work environment. Must be based in the Warner Bros. Discovery (NYC or Atlanta) office
• 12+ years' progressive experience in managing Product Security, Application Security, and/or DevSecOps teams, preferably in support of a streaming platform, but not required
• Proven effective coaching, mentoring, and management style that yields strong morale, motivation and deep team engagement.
• 12+ years' experience in Application Security, DevSecOps. Experience in developing security by design and deployment for AWS and GCP using automation and CI/CD pipelines
• Broad knowledge of IT Security technologies, process, and techniques and a strong understanding of application security leading practices including OWASP.
• Extensive prior experience in secure code reviews, business logic assessment, and application security testing.
• Experience deploying cybersecurity solutions in a public cloud environment (IaaS, PaaS, SaaS)
• Familiar with security tools such as BurpSuite, SAST, DAST, Nmap, Metasploit, and Kali Linux, etc.
• Experience managing programs that support secure coding and software deployment in a variety of current languages (e.g. Python, Node.js, C#, .NET, JavaScript, Go, Ruby, GraphQL, SDK and RESTful API design/development).
• Experience working with Agile development/Scrum methodologies, and incorporation of security requirements into SDLC (CI/CD) with product owners/managers
• Strong knowledge of software and application design and architecture principles.
• Good communication and presentation abilities with attention to detail.
• CISSP, CEH, GWEB, CWAPT, CCSP, CSSLP, CISSP-ISSAP, GPEN, GWAPT, GMOB or OSCP certifications are highly desired, but not required

Jobcode: Reference SBJ-gwo89p-18-117-182-179-42 in your application.