Director of Cybersecurity

POSITION SUMMARY

The Director of Cybersecurity leads the cybersecurity program — setting strategy, owning the organization’s risk posture, and delivering executive- and board-level cyber-risk reporting. The role builds and leads the internal security team, manages security vendors and their SLAs, and directs incident response and cyber resilience across a global footprint. The Director reports to the VP, IT Infrastructure & Cybersecurity, with an independent line for cyber-risk reporting.

KEY RESPONSIBILITIES

• Set and own the cybersecurity strategy, program roadmap, and risk posture across a global footprint, anchored to NIST CSF 2.0.
• Deliver executive- and board-level cyber-risk reporting.
• Manage security vendors and contracts; define and enforce SLAs and hold partners accountable to contracted obligations.
• Build and lead the internal security team and bring core security functions in-house from managed providers.
• Direct incident response and cyber resilience, including business continuity and disaster recovery.
• Establish cybersecurity governance, policy, and security‑awareness programs.
• Own the cybersecurity budget and headcount plan.

FUNCTIONS OWNED

• Security Leadership & Strategy
• Governance, Policy & Awareness
• Incident Response & Cyber Resilience (supports GRC, Risk & Compliance and AI Governance & Emerging Tech)

REQUIRED QUALIFICATIONS

• 12+ years in cybersecurity, including 5+ years leading security teams at manager/director level, ideally in a global, high-profile, or media/entertainment enterprise.
• Demonstrated ownership of an enterprise security program built on NIST CSF 2.0 (or ISO 27001) — governance, policy, control framework, and a multi-year maturity roadmap.
• Track record building and leading an internal security function — hiring, developing, and retaining architects, engineers, and analysts — including insourcing functions from a managed provider (MSSP).
• Executive- and board-level cyber-risk reporting; experience presenting to boards, audit/risk committees, and ownership or private-equity stakeholders, translating technical risk into business and financial terms.
• Enterprise risk management and multi-jurisdiction regulatory literacy across a global footprint — SOX ITGC and global privacy regimes (GDPR, CCPA/CPRA, PIPL).
• Proven vendor and contract management — negotiating and enforcing SLAs with MSSPs and holding them accountable to contracted obligations.
• Incident-response leadership — has directed the organization’s response to a material security incident and owns cyber-resilience / BCP-DR direction.
• Security-budget ownership — has built and defended a security operating budget and headcount business case.
• Working architecture fluency across identity, cloud (Azure), data protection, and SASE — enough to direct architects and challenge technical designs.
• Bachelor's degree in a relevant field or equivalent experience; CISSP and/or CISM required.

PREFERRED QUALIFICATIONS

• Private-equity portfolio-company experience, including M&A security due diligence and post-close integration.
• Media, entertainment, talent-representation, or high-net-worth-individual environment — elevated BEC/impersonation and privacy exposure.
• Experience standing up an independent cyber-risk reporting line or remediating findings from an external security assessment or audit.
• Experience insourcing security functions from a managed provider on a phased plan.
• Advanced credentials — CRISC, CCISO, or an MBA / MS in cybersecurity.

PAYMENT & BENEFITS

Per local requirements and in the interest of transparency, the rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.

• Hiring Rate Minimum: $183,750 annually (minimum will not fall below the applicable state/local minimum salary thresholds)
• Hiring Rate Maximum: $245,000 annually

ABOUT WME

WME is the world's preeminent talent agency. With over 125 years of experience, WME enables artists, athletes and brands to grow their businesses, leverage the full potential of their intellectual property, and bring projects to life that define the cultural landscape. WME's expertise spans books, comedy, digital media, fashion, film, food, licensing, music, sports, television, theater, and more. Headquartered in Beverly Hills, WME's office locations include Australia, Chicago, China, London, Miami, Nashville, and New York. WME is part of WME Group, a global network of businesses that represent the world’s leading talent, intellectual property and brands.

For more information, please visit