Deputy CHIEF Information Security Officer

Vice President, Cybersecurity and Deputy Chief Information Security OfficerNew York, NYThe mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It's why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It's why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it's why our business strategy centers on making journalism so good that it's worth paying for.About the Role:As Vice President, Cybersecurity and Deputy CISO, you will translate our cybersecurity strategy into operational reality.You will:Lead and integrate core security functions, including security architecture and engineering, threat detection and incident response, security operations, identity and access management, and risk and compliance.Own day-to-day cybersecurity program execution, including annual planning, roadmap delivery, operational reviews and metrics.Serve as the primary operational escalation point for significant security risks and incidents, partnering closely with Global Security, Legal, Communications, Enterprise Technology and business leaders.Act as a visible security leader with executives, senior editors and technology leaders, helping them understand risk, tradeoffs and priorities in practical terms.Serve as acting CISO when needed, including during executive forums, audits and key stakeholder meetings.This is a hybrid role based in our New York City headquarters, reporting to the CISO and Head of Enterprise Technology. You can typically expect to come into the office 3+ days per week.Responsibilities:Program leadership and strategy executionSecurity architecture, engineering and operationsDetection, incident response and resilienceGovernance, risk, compliance and security educationNewsroom and high-risk user securityPeople leadership and cultureBasic Qualifications:12+ years of progressive experience in cybersecurity or information security, including leadership of large, complex security programsExperience leading multiple security domains, such as security engineering, security operations, incident response, cloud security, identity, application security or GRCPrior experience in a VP, Head of Security, Deputy CISO or similar senior leadership role with accountability for both strategy and executionDeep technical understanding of modern security architectures, including cloud (AWS, GCP or similar), network, endpoint, identity and application securityProven track record leading major incident response efforts and security crisis management, including communication with executives and external stakeholdersStrong familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, SOC 2, PCI, HIPAA and data protection regulationsExperience working in close partnership with teams across Legal, Privacy, HR, Finance, Internal Audit and external regulators or auditorsExpertise building and leading diverse teams, including developing senior managers and cross-functional leadersPreferred Qualifications:Experience securing media, news, technology or similarly fast-paced, high-profile environments with unique threat modelsBackground working directly with or supporting newsroom, high-risk user or investigative teamsExperience presenting to boards or audit committees and supporting public-company security and risk disclosuresExperience operating in a global context, including international offices, complex regulatory environments and cross-border data considerationsPrior experience shaping AI governance, AI security or emerging-technology security programs