Sr. Director, Product Security

Every great story has a new beginning, and yours starts here.

Welcome to Warner Bros. Discovery… the stuff dreams are made of.

Who We Are…

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

Your New Role...

The Sr. Director, Product Security oversees all information security efforts for Warner Bros. Discovery’s digital platforms, revenue-generating business systems across the globe.

This role is specialized in and is accountable for information security relevant to customer-facing technologies, appropriate protection of user and customer information. The role will drive translation and successful execution of cyber security requirements, and lead resolution of Digital Platform and business-related systems security issues in fast-paced global environments.

The Sr. Director of Product Security will be an important member of Warner Bros. Discovery’s Global Information and Content Security (GISC) team and collaborate with Global Direct to Consumer (DTC) and Broadcast teams on initiatives to design and deploy appropriate, risk-based security technical security controls to protect consumer data, services, and technology assets of Warner Bros. Discovery's portfolio. The role will focus on product security for our streaming media services and other supporting businesses. This leader will work closely with development and engineering teams to ensure secure architectures, patterns, and solutions are created and maintained. The person taking this position will strive to lead from the front, growing a strong team of engineers through fantastic communication and collaboration.

If you:

• are passionate about consumer facing web, tv, and mobile application security
• are driven to mentor and grow a team of skilled practitioners
• are excited to work in an international, face-paced company with a large suite of products
• think security is a feature of a product and not a compliance checkbox
• want to help implement and mature a robust product security program at scale

Join us!

Your Role Accountabilities...

• Lead a global and diverse team.
• Drive a program that can conduct product security risk assessments, analysis, and monitoring at scale.
• Develop and grow the Product Security programs in areas such as security architecture engagement strategies, product threat modeling at scale and security technical champion’s program.
• Deliver strategic quarterly roadmap plans and effectively lead the successful completion of initiatives on-time and with high quality.
• Lead a team to perform design analysis, review, piloting, and selection of security technologies that meet specified application/business requirements, as needed.
• Identify and define security requirements and security baselines for the various classes of assets and environments in use at Warner Bros. Discovery or its partners.
• Work collaboratively and proactively across the organization (e.g., Technical Architects/Leads, Product managers, Digital Media Program Teams, etc.) to support the remediation security gaps.
• Review technical architectures that deliver to a wide array of client delivery platforms
• Understand and recommend security controls for the rapid development of consumer-facing prototypes to identify technical options and inform architectural approaches.
• Identify and recommend best-of-breed security stack and controls for interactive consumer experiences across web and mobile devices. (i.e., project, customer, and vendor management skills)
• Engage assigned business lines as the central point-of-contact for information security controls.
• Manage relationships effectively, advocating for business and external customers by engaging in security-related requirements conversations, seeking understanding of control requirements for presenting to IT security solution architects.
• Advocate for the company’s security initiatives and controls deployment. Stay knowledgeable about the company’s technical controls and advocates for the technical security control needed by assigned business.
• Promote and evangelize the company’s Security Policies and Standards. Advise stakeholders on security deviation control alternatives, such as compensating controls, and leads stakeholders through the policy deviation process.

Qualifications & Experience...

• Hybrid work environment. Must be based in the Warner Bros. Discovery office, minimum three-days/week.
• 10+ years’ experience in managing Information Security global teams.
• Proven effective coaching, mentoring, and management style that yields strong morale, motivation and deep team engagement.
• 1+ years’ experience in of cybersecurity architecture/engineering, cloud security, and/or application security with a bachelor’s degree or higher in related field
• Broad knowledge of IT Security technologies, process, and techniques and a strong understanding of application security leading practices including OWASP.
• Extensive prior experience in secure code reviews, business logic assessment, and application security testing.
• Experience deploying cybersecurity solutions in a public cloud environment (IaaS, PaaS, SaaS)
• Familiar with security tools such as BurpSuite, SAST, DAST, Nmap, Metasploit, and Kali Linux, etc.
• Experience managing programs that support secure coding and software deployment in a variety of current languages (e.g. Python, Node.js, C#, .NET, JavaScript, Go, GraphQL, SDK and RESTful API design/development).
• Experience working with Agile development/Scrum methodologies, and incorporation of security requirements into SDLC (CI/CD) with product owners/managers.
• Excellent knowledge of software and application design and architecture principles.
• Experience working in large global environments.
• Excellent communication and presentation abilities with great attention to detail.
• CISSP, CEH, GWEB, CWAPT, CCSP, CSSLP, CISSP-ISSAP, GPEN, GWAPT, GMOB or OSCP certifications are highly desired.

How We Get Things Done…

This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. We hope they resonate with you and look forward to discussing them during your interview.

The Legal Bits…

Warner Bros. Discovery embraces the opportunity to build a workforce that reflects the diversity of our society and the world around us. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.