VP, Cybersecurity Operations and Engineering

We need to output HTML fragment with sections: About the role? Actually we have "Who We Are" and "Position Overview". The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Use

• for any list of duties/requirements/benefits, and

  for prose. Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

  or drop it. Preserve ALL substantive information; do NOT invent or summarize away detail. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. IMPORTANT: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. Prefer a few substantive sections over many thin ones. We need to decide which sections to include. The posting includes: Who We Are (company description), Position Overview (summary), Key Responsibilities (multiple sub-sections: Cybersecurity Program Leadership and Governance, Operations Oversight and Resilience, Security Engineering and Control Maturity, Risk, Compliance, and Business Partnership, Team Leadership). Qualifications (including Preferred Qualifications). What Success Looks Like (maybe could be considered as part of responsibilities or outcomes). Pay info: Hiring Rate Minimum $225,000 annually, Maximum $300,000 annually. Also mention benefits: "robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings." So we have Pay and Benefits info. Schedule not mentioned. So we can include sections: About the Company (maybe "Who We Are") but instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. They gave examples but not strict list; we can use those headings if appropriate. However "About the role" maybe corresponds to Position Overview. "Who We Are" is about company, not role. Could we still include a section like "About the Company"? Not in examples but maybe okay. But they said use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It seems they expect those headings; we can use them if content matches. For company description maybe we can put under "About the role"? Not ideal. Could we create a section "About the Company"? Might be okay but not in list. Safer to follow examples: Use "About the role" for position overview. Use "Responsibilities" for key responsibilities. Use "Qualifications" for qualifications (including preferred). Use "Benefits" for benefits description. Use "Pay" for salary range. Possibly also "Skills" if we want to extract skills but not needed. Could combine qualifications and skills? But we have qualifications section already. We'll not create Skills unless we have explicit skills list; we could pull from qualifications but better to keep Qualifications. We must not include filler like "commensurate with experience". Pay section we have actual numbers, so include. We must remove EEO boilerplate etc. So we will omit the equal opportunity statement, privacy policy, terms of use, etc. We need to preserve all substantive information: company description, position overview, responsibilities (with subpoints), qualifications (including preferred), what success looks like (maybe we can incorporate into responsibilities or as its own section? Could be "What Success Looks Like" but not in examples; maybe we can treat as part of Responsibilities or as a separate section like "Success Metrics". But instruction says prefer few substantive sections over many thin ones. Could merge "What Success Looks Like" into Responsibilities or Qualifications? It describes outcomes; maybe we can add a section "Outcomes" but not in list. Safer to include as a subsection under Responsibilities? But we need to use

  • for lists. The "What Success Looks Like" is a list of bullet points. We could treat that as part of Responsibilities (makes sense). Or we could create a section "Success Metrics" but not in examples; risk of being considered thin. I'd incorporate into Responsibilities as additional bullet points. We need to output only HTML fragment, no /, no markdown fences. Thus structure:

    About the role

    Position Overview text...

    Responsibilities

    • Cybersecurity Program Leadership and Governance: ... (maybe we need to break into sub-bullets? Could keep as one li with subpoints separated by semicolons or we could nest ul? Not specified but we can keep plain li with sentences.
    ... etc. for each major responsibility area. We need to preserve all details. Let's extract each responsibility area text. From posting: Key Responsibilities Cybersecurity Program Leadership and Governance Lead the enterprise cybersecurity operations & engineering programs, including documenting strategy, risk governance, organization roadmap development, budgeting, KPI reporting, and preparing executive communications. Contribute to cybersecurity policies, standards, procedures, and control frameworks aligned to business objectives and risk appetite. Develop and maintain governance forums, steering committee materials, risk updates, and decision-supporting business cases for senior leadership. Partner with legal, compliance, privacy, internal audit, and technology stakeholders to strengthen the company’s overall security, regulatory, and governance posture. Drive consistent security practices across corporate, cloud, application, and business environments, ensuring alignment with enterprise architecture and operating models. Translate threat, control, and assessment findings into practical, risk-informed recommendations and prioritized remediation plans. Operations Oversight and Resilience Provide executive oversight for security operations, including SOC and/or MSSP performance, alert monitoring, incident triage, escalation management, and operational readiness. Own and mature incident response planning, operational runbooks, tabletop exercises, and cross-functional response coordination with technology, legal, HR, and compliance teams. Oversee threat intelligence, threat detection, threat hunting, and vulnerability management capabilities to improve visibility, response speed, and control effectiveness. Ensure the organization is prepared to protect, detect, respond to, and recover from cybersecurity events affecting critical systems, intellectual property, data, and brand reputation. Develop and monitor operational metrics and service-level indicators for security operations, incident management, remediation progress, and program effectiveness. Security Engineering and Control Maturity Oversee the design, implementation, enhancement, and lifecycle management of cybersecurity technologies and control capabilities across on-premises, cloud, endpoint, identity, and network domains. Partner closely with infrastructure, platform, and software engineering teams to embed security into enterprise architecture, system design, and operational workflows. Support secure development lifecycle practices, software assurance, secure coding, and application security initiatives across internal and customer-facing environments. Guide the selection and optimization of security tools and services, including SIEM, EDR, IDS/IPS, firewalls, vulnerability management, logging, monitoring, and related protection technologies. Promote automation, orchestration, and process simplification to improve scalability, consistency, and efficiency across cybersecurity operations and engineering. Risk, Compliance, and Business Partnership Lead cyber risk assessments across infrastructure, applications, vendors, business processes, and emerging technology initiatives. Support compliance and control maturity efforts related to frameworks and obligations such as NIST, ISO 27001, PCI-DSS, SOC, SOX, GDPR, privacy, and other applicable requirements. Provide security leadership for vendor and third-party reviews, architectural reviews, major initiatives, and transformation programs. Build trusted relationships with business and technology leaders to ensure security enables growth, resilience, and informed risk-taking. Champion security awareness, education, and culture-building efforts that improve employee behavior and strengthen organizational readiness. Team Leadership Lead, coach, and develop high-performing cybersecurity managers and individual contributors across program, operations, and engineering functions. Foster a culture of accountability, collaboration, continuous improvement, and service-oriented partnership. Mentor technical teams on incident response, operational excellence, architectural decision-making, and effective communication with executive and non-technical audiences. Qualifications Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience. 12+ years of progressive cybersecurity experience, including leadership of enterprise security programs in complex, high-growth, or globally distributed organizations. 7+ years of leadership experience managing managers, cross-functional teams, and/or external service providers across multiple cybersecurity domains. Demonstrated success building or maturing cybersecurity governance, program management, security operations, and security engineering capabilities. Strong working knowledge of cybersecurity frameworks, regulatory requirements, and assurance practices, including NIST CSF, ISO 27001, PCI-DSS, SOC, SOX, data privacy, and related standards. Experience leading or overseeing incident response, threat intelligence, vulnerability management, detection engineering, and security monitoring programs. Strong technical understanding of cloud security, identity and access management, endpoint protection, network security, logging and monitoring, system hardening, and enterprise security architecture. Experience working closely with software development and infrastructure teams to integrate security into lifecycle management, architecture, and operational processes. Proven ability to define metrics, communicate risk clearly, and present meaningful security insights to operational, technical, and executive stakeholders. Strong business judgment and the ability to balance risk reduction, operational efficiency, and strategic enablement. Excellent written and verbal communication skills, with the ability to influence across all levels of the organization. Preferred Qualifications Master’s degree in a relevant discipline. CISSP or comparable industry certification. Experience in media, entertainment, sports, or other fast-paced global operating environments. Experience overseeing a hybrid model that includes internal teams and managed security partners. Experience building metric-driven security programs and using automation to streamline cyber workflows What Success Looks Like A clearly governed cybersecurity program with measurable outcomes, executive visibility, and aligned priorities. Strong project portfolio management including active projects, roadmaps, greenlighting materials, and overall strategy documents. Maintains Cyber Risk Register and Risk governance process Supports procurement calendar, budget, and actuals for current and future year. Mature operational readiness across monitoring, response, vulnerability remediation, and threat-informed defense. Supports engaging C-Suite and IT Leadership content, meeting materials, and agendas. Strong partnership across technology and business teams, resulting in better security-by-design and faster risk reduction. Scalable engineering and program capabilities that improve resilience while enabling the business. Pay Hiring Rate Minimum $225,000 annually (minimum will not fall below the applicable State/local minimum salary thresholds) Hiring Rate Maximum $300,000 annually Benefits robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings. We also have "Per local requirements and in the interest of transparency, the hourly rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings." We can incorporate that into Benefits section. Now we need to output HTML. We'll have:

    About the role

    [Position Overview]

    Responsibilities

    • Cybersecurity Program Leadership and Governance: ... (list sentences)
    • Operations Oversight and Resilience: ...
    • Security Engineering and Control Maturity: ...
    • Risk, Compliance, and Business Partnership: ...
    • Team Leadership: ...
    But we also have the "What Success Looks Like" points; we