Information Security Engineer

Information Security Engineer

We are looking for an Information Security Engineer to operate and maintain our information security systems. As a mid-size entertainment company with global reach, we manage sensitive intellectual property and digital assets that demand the highest level of security. This role will be responsible for helping to design, implement, and maintain a robust information security program that aligns with business objectives and compliance requirements.

Key Responsibilities

• Governance, Risk Management, and Compliance
• Establish and maintain security policies, standards, and procedures that comply with applicable regulations.
• Oversee risk assessments and audits, ensuring remediation plans are executed effectively.
• Manage vendor security evaluations and third-party risk management programs.
• Operational Security
• Oversee incident detection, response, and recovery processes to ensure rapid containment and resolution of security events.
• Implement and monitor security controls across endpoints, networks, and cloud infrastructure.
• Lead vulnerability management, penetration testing, and threat intelligence initiatives.
• Awareness and Culture
• Develop and deliver ongoing security training and awareness programs for all employees.
• Champion a culture of security across departments, ensuring staff understand their role in protecting company assets.
• Mentor junior technical staff on information security best practices, operations, and technology.
• Technology and Innovation
• Partner with IT and digital teams to integrate security into technology architecture and workflows.
• Evaluate and implement advanced security tools, automation, and analytics for proactive threat management.
• Stay current with emerging threats, trends, and technologies in cybersecurity and the entertainment industry.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of progressive experience in information security.
• Proven experience supporting enterprise security programs, preferably in media, entertainment, or technology environments.
• Strong knowledge of cloud security, identity and access management, and data loss prevention.
• Strong knowledge of Conditional Access Policies and Device Compliance in Microsoft Entra ID.
• Experience implementing and managing SSO and SCIM configurations.
• Familiarity managing PAM solutions like Microsoft Privileged Identity Management.
• Strong programming (Python) and/or scripting skills (PowerShell/Bash)
• Familiarity with common device management tools like Intune, Jamf, Mosyle, Addigy, etc.
• Professional certifications such as Security +, Network +, CISSP, CCSP or CASP, or similar highly desired.
• Excellent communication and stakeholder management skills — able to translate complex technical risks into clear business implications.

We will not be able to support sponsorship or visas for this position at this time.

The base salary range for this role is $120,000 - $150,000 + annual discretionary bonus depending upon experience. Our offices are located in Westwood Village, Los Angeles, CA. Employees work in the office Monday through Thursday and from home on Fridays. We offer a very competitive benefits package, annual bonus, and a creative and dynamic working environment. This position is based in California and is subject to California employment laws and workplace safety requirements, including the Company's Covid vaccination policy. Reasonable accommodations will be considered in accordance with applicable law. Successful candidates will be required to show proof of being vaccinated against COVID-19. This requires having a two-dose series and a booster, or a single dose series and a booster. Reasonable accommodations will be considered on a case-by-case basis for exemptions to this requirement in accordance with applicable law. Disclaimer: This job description only provides an overview of job responsibilities that are subject to change. We are an Equal Opportunity Employer