Manager, Information Security, Productions

Manager, Information Security Productions

The Information Security organization at Sony Pictures Entertainment is responsible for protecting our content, systems, and data from being stolen, damaged, or destroyed. To do so, we are continuously improving our tools, capabilities, and processes to stay ahead of evolving threats.

The Manager, Information Security Productions is accountable for operationalizing the Information Security Productions program across all SPE U.S. productions. This includes driving consistent implementation of approved security standards, tools, and controls; ensuring data-driven visibility into production security risk; and supporting compliance and readiness reporting to leadership. Success in this role requires strong cross-functional collaboration across Information Security, IT, S3, and production teams to embed security into creative workflows without friction, while ensuring protection of SPE's most valuable assets—our stories and intellectual property.

This role will also ensure program consistency with regional and global counterparts, contribute to automation and standardization of key controls, and support ongoing improvement of information security for productions practices across the production lifecycle.

Key indicators of success in this role will be:

• Business leaders have near real-time visibility into production information security risk using meaningful, actionable metrics that drive timely and effective decision-making.
• Consistent application of approved tools, workflows, and controls across productions, ensuring compliance and readiness reporting aligns with studio KPIs.
• Production teams trust SPE to provide a secure, highly available, and easy-to-use digital production environment that safeguards our content and data.
• Information Security, Physical Security, and IT operate as unified partners to protect SPE productions from concept to archive.

Within this organization, we value learning, agility, and collaboration. The Manager, Information Security Productions (CC, US) will be a key contributor to Sony Pictures Entertainment's goal of being the most trusted studio in the industry.

Responsibilities

• Provide visibility and actionable insight into Information Security risk across active U.S. productions.
• Monitor, analyze, and report on production security posture and key control performance metrics for each production.
• Partner with global InfoSec, Risk, Threat Intelligence, Incident Response, Training, and Governance teams to align production needs with enterprise programs.
• Prepare and present dashboards and reports on security trends, compliance status, and improvement opportunities.
• Support the development of production-specific metrics and KPIs to measure control effectiveness.
• With IT and Physical Security, maintain security controls in place for productions to most effectively meet our business goals.

Operationalize the Production Information Security Program across U.S. productions.

• Ensure consistent implementation of approved security tools, policies, and workflows within productions.
• Coordinate adoption of automated controls with productions, such as provisioning, watermarking, and access telemetry.
• Support the standardization and scalability of production security practices across production titles and business units.

Ensure and track production security culture, awareness, and response readiness.

• Amplify the reach of security training and awareness initiatives by coordinating rollout to productions, ensuring consistent messaging and participation tracking.
• Gather feedback from productions to help refine information security for productions training and awareness efforts.
• Partner with Incident Response to ensure clear communications, timely follow-up, and closure of corrective actions.
• Track cultural and operational readiness indicators (e.g., onboarding rates, reporting engagement, post-incident improvements) to measure program maturity and continuous improvement.

Qualifications

• 5+ years of experience in Information Security, Information Technology or a related field
• 5+ years of experience in an organization directly involved in movie, television and/or other entertainment production, or equivalent educational experience.
• Bachelor's degree preferred
• Strong understanding of the technologies, tools and processes used in production of movies and/or television.
• Knowledge of Information Security frameworks, standards and best practices and their relevance to business success
• Specific knowledge of processes, tools and practices used to maintain confidentiality in the context of movie and television productions.
• Ability to develop and maintain meaningful metrics to track program and process effectiveness.
• Strong planning and analytical skills
• Strong communications skills

The anticipated base salary for this position is $115,000-$150,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.

SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.