Director, Compliance, Metrics & Awareness

Full Time Job
Sony Music is seeking an Information Security professional to join the Global Information Security organization located in New York. This position will be a part of the team responsible for implementing and maintaining an enterprise-wide risk and compliance strategy to secure Sony Music’s information assets, services, and the products that depend on them, building trust with customers and stakeholders, and protecting the privacy of Sony’s customers and employees.

The ideal candidate will be responsible for the continued enhancement and maturity of the company’s ISMS program. The candidate must be a strategical thinking and team-player with the experience and ability to work in a dynamic environment that will often require the candidate to juggle multiple tasks. The candidate should have a proven history of policy design and security awareness delivery across all security domains. The candidate should have experience in security management techniques including security measurements, gap analysis, external or internal audit, risk management concepts and security awareness methodologies. Candidate should be able to leverage multiple methods of communications targeted at a broad multi-language employee base to articulate complex concepts with proficiency to both technical contributors and executive management.

Sony Music is committed to providing equal employment opportunity for all persons regardless of age, disability, national origin, race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, veteran or military status, genetic information or any other status protected by applicable federal, state, or local law.

Responsibilities

Will include, but are not limited to:
• Create, amend and maintain policy and standards across the company, ensuring alignment with global policies
• Conduct periodic audits of the company’s Information Security Management system (ISMS) policy and information security practices and controls
• Evaluate controls and measurements against policies, standards and processes
• Liaise with Sony Group Policy and Compliance teams
• Manage treatment plans and policy exceptions, driving enhancements to the overall maturity of the security program
• Evaluate the effectiveness of controls based upon industry best practice models
• Implement and manage activities to measure and monitor successful implementation
• Provide executive level metrics and reporting, dashboards, and detailed presentations for senior management and business leaders
• Develop and communicate ad-hoc security dashboards and reports for stakeholders as and when required
• Monitor and participate in mid-range planning exercises and risk and metrics committees
• Maintain the global employee awareness training programs in coordination with the HR and Sony Group training teams

Qualifications

• Minimum 15 years’ experience in information security, IT program management, or internal audit
• Minimum 15 years’ experience in information security control assessments, audit, or compliance
• Bachelor’s degree, preferably in Computer Science or a related field, such as business administration or management information systems, or equivalent experience
• CISA, CISSP, or similar industry recognized certification preferred
• Track record of independently performing information security assessments or IT / ISO audits
• Superior negotiation and communication skills to maintain positive working relationships with business stakeholders
• Experience with GRC tools, such as RSA-Archer preferred
• Significant experience with MS Office, especially Excel and PowerPoint, required
• Fluency and experience with information security standards such as ISO 27001, ISO 27002, NIST publications, etc.
• Ability to address multiple assignments simultaneously, with strong ability to prioritize tasks and respond to dynamic priorities
• Excellent writing and analytical skill set
• Ability to travel, including internationally, up to 15%
• Eligible to work unrestricted in the USA

Decision/Problem Solving Skills:
• Strong analytical skills
• Adept at learning new technologies
• Ability to handle simultaneous projects, prioritize tasks and meet deadlines
• Strong written and verbal communication skills and the ability to interact well with different levels within the organization
• Ability to host, present, and facilitate meetings to all levels of management including Chief Information Officers, Chief Technology Offers and their direct reports
• Ability to work well in a collaborative, team oriented environment
• Excellent organizational skills and attention to detail