Information Security Director

Role Overview

The Information Security Director leads information security for Hearst Newspapers (HNP) and is responsible for security leadership, implementation and compliance across HNP. Reporting to the SVP Technology, HNP, and in partnership with the SVP of Product and Strategy, the director translates Hearst corporate requirements into priorities and practices for HNP, represents HNP needs in discussions about enterprise security strategy and roadmap, and provides strategic, operational and tactical direction to HNP teams, including application owners, engineers and executives. The director leads a small HNP security staff and works in a matrixed manner with HNP business and technology teams and Hearst Technology Services (HTS).

The director combines security program leadership with technical judgment to guide and, when needed, perform security engineering. The director leads technical work through direct reports and matrix partners, and may personally implement or troubleshoot controls, fixes, upgrades, automation and other engineering tasks when team capacity, urgency or technical complexity requires it.
What You'll Do

• Read, understand and ensure HNP compliance with the Hearst Corporate Information Security Policy (HISP).
• Establish effective operational protocols and coordinate security policy education and enforcement.
• Serve as a trusted security advisor to HNP lines of business.
• Lead a small HNP security staff of engineers and compliance professionals.
• Coordinate regularly with the HTS Governance, Risk and Compliance team on enterprise policy, risk, assurance and reporting, keeping HNP program ownership and HTS's enterprise governance responsibilities clear. The director owns implementation and security outcomes for HNP.
• Analyze technologies and establish effective processes and protocols to identify risks to data integrity and security and prevent unauthorized access to HNP networks and systems.
• Work in a matrixed manner across HNP groups and engineering teams to coordinate priorities, oversee vulnerability management and end-of-life (unsupported) systems, ensure HISP compliance and deliver security outcomes without relying solely on direct reporting authority.
• Personally implement or troubleshoot security fixes, upgrades and controls that support HISP compliance, as needed.
• Oversee verification and validation of the HNP security program, using internal resources and HTS.
• Coordinate third-party security assessments of HNP vendors and review security requirements in vendor contracts with the appropriate HNP, procurement, legal and HTS partners.
• Stay current on the cybersecurity threat landscape, especially as it affects newspaper and media organizations.
• Lead HNP incident response, including communication with executives and affected teams.
• Lead security-related projects from inception to successful completion, and coach technology staff on appropriate security protocols and needs as they implement new technology.
• Contribute HNP requirements and lessons to the enterprise security strategy and roadmap.
• Perform other duties as required or assigned.

What You'll Bring

Required Qualifications

• At least five years of hands-on engineering or technical experience, plus at least three years of hands-on information security experience.
• Experience leading or managing technical or security staff, including through matrix relationships.
• Bachelor's degree in computer science, information assurance, MIS or a related field, or equivalent experience.
• CISSP certification.
• Strong written and oral communication skills, including the ability to explain detailed technical information to audiences of varying experience and skill level and to speak confidently to large groups, corporate management, vendors and service providers.
• Solid organizational skills and the ability to multi-task, prioritize workload and delegate responsibilities.
• Flexibility and effectiveness under stress in a constantly changing environment.
• Excellent judgment and the ability to make quick decisions and think outside the box in complex situations.
• Forward thinking, with business acumen.
• Self-starter requiring minimal supervision.
• Ability to work effectively with a variety of personalities and adapt your approach to influence matrixed teams.

Preferred Qualifications

• Master's degree, MBA or other advanced degree in information assurance or technology.
• CISM or SANS/GIAC certification.

Additional Information

• Sponsorship: This position does not provide immigration sponsorship. Applicants must have the right to work in the U.S. without immigration sponsorship.
• Accommodations: We are committed to an accessible application process. If you need an accommodation to apply, please contact [redacted]. This email address is for accommodation requests only.

Benefits

We support our employees through personal and professional development and promote physical, financial and emotional wellbeing for employees and their families. Our benefits include:

• Physical Wellbeing: Medical, dental and vision coverage to help keep you and your family healthy.
• Invest for the Future: Competitive retirement plan with a matching program in most markets.
• Generous Paid Time Off: Ample time off, including holidays and vacation.
• Paid Parental Leave: Paid leave to support growing families and new parents.
• Monthly Child & Dependent Care Reimbursement: Financial support for the care of your loved ones.
• Emotional Wellbeing: Mental wellness benefits to support your emotional wellbeing.
• LGBTQ+ & Inclusive Health Services: Inclusive healthcare designed for individual needs.
• Fertility Coverage & Menopause Support: Support throughout different stages of your health and family journey.
• Pet Wellness Reimbursement & Rover Credits: Support to help keep your pets happy and healthy.
• And more: Learn more about additional benefits and details here.

Compensation
The base salary range below is the Company's good-faith estimate for this position in the posted work location at the time of posting. Final starting salary will be based on permissible, non-discriminatory factors, including but not limited to skills, experience, training, certifications, education, location and market considerations.

Base Salary Range:

$125,000-$150,000 USD