Infosec Arch & Engineering Director

Job Description

Our Team

As Discovery s' portfolio continues to grow – around the world and across platforms – the Global Technology & Operations (GT&O) team is building media technology and IT systems that meet the world class standard for which Discovery is known. GT&O builds, implements and maintains the business systems and technology that are critical for delivering Discovery's products, while articulating the long-term technology strategy that will enable Discovery's growing pay-TV, digital terrestrial, free-to-air and online services to reach more audiences on more platforms.

Within our Global Information Security team, there has never been a busier or more urgent time to obtain the best talent we can for a function so critical to Discovery. In light of the constant threats and attacks occurring in companies across the globe, and across all industries, the Information Security Team at Discovery is a growing group of cyber security professionals, that are using the latest tools and resources to protect the assets from our internal infrastructure to the shows we broadcast across the globe on Discovery Channel, Animal Planet, Discovery ID, TLC, EuroSport, TVN, and more. From the US to Singapore, Poland, India to LA, we are tasked with protecting, training, and implementing the best of the best in tools, resources, monitoring, threat detection, and more.

Key Areas of Responsibility:
• Perform IT security assessments, prepare information systems security action plans, evaluate information security products, and perform other activities necessary to ensure a secure environment.

• Implement the requirements of Discovery and other information systems security policies, standards, baselines, guidelines, and procedures.

• Review current system security measures and recommend and implement enhancements.

• Ensure all personnel have access to the IT system limited by need and role.

• Document detailed technical requirements and security baselines for technologies.

• Provide direction to business lines on information security architecture.

• IT Security analysis of Discovery of current and new implemented IT Systems

• Developing security test plans based on system architecture, dataflow and hardware and software profile information.

• Identification and definition of system security requirements and advising on the design of security monitoring infrastructure.

• IT Security Incident management process coordination (communicates and escalates security alerts, intrusions, and compromises, to various IT groups in multiple locations)

• Supervising of monitoring of security in IT systems (Help establish and maintain processes to monitor network traffic for anomalous activity).

• Monitoring and analyze security tools (e.g SIEM) to identify and investigate potential security events and issues for remediation.

• Design and implementation of cybersecurity counter-measures or mitigating controls as necessary

• 24x7 Cyber security support, as needed

• Developing security test plans based on system architecture, dataflow and hardware and software profile information

• Developing technical solutions and new security tools to help mitigate security vulnerabilities

• Manage and drive vulnerability remediation across TVN technology/broadcast groups as needed

Position summary:

The Director, InfoSec Arch & Engineering, reporting to the VP, TVN & APAC Business Information Security Office, will play a key role in both managing design of secure solutions for Discovery and supporting 24x7x365 Cyber Security Operations Center (CSOC). This role has direct responsibility for designing secure solutions for TVN & APAC area, ensuring systems are designed in line/partnership with Global Discovery Security Operations Group, in a manner that meets any regulatory requirements as well as Discovery security policies and standards. Core focus on managing the engineering and operations teams building solutions and keeping solutions running smoothly. This role will require one to work across multiple global organizations and service providers in order to effectively monitor for suspicious activity as well as make recommendations to improve the security posture and protect the Discovery brand globaly

Requirements:
• 7+ years of progressive experience within a IT Security Operations environment

• 5+ years of IT security engineering work experience (including 2+ years of cloud security environment)

• 5 years of security architecture experience

• Analytical skills

• Excellent written and verbal communication skills as well as business acumen and a commercial outlook

• Solid understanding of security protocols, cryptography, authentication, authorization and security

• Able to provide computer forensic support to investigations in the form of evidence seizure, computer forensic analysis, and data recovery

• Experience knowledge of TCP/IP, networking design, and routing architectures

• Experience knowledge of network security systems and protocols, including firewalls, Radius and TACACS+, IPSEC and IKE, SSH, etc.

• Ability to maintain proficiency in vulnerability and threat management best practices

• Ability to develop and implement security procedures and control

• Team managing skills and experience

• Project Management experience

• Demonstrated ability to explain risks of security threats to both technical and non-technical audiences

• Strong influencing skills to include negotiation, problem solving, and conflict resolution

• Must be able to work in a face-paced organization

• Excellent communication and presentation ability with attention to detail

• Languages: Fluent English and Polish

Jobcode: Reference SBJ-d23v15-3-149-234-141-42 in your application.