Director of Cybersecurity WME Group

•3.0 Beverly Hills, CA Job Details $183,750

•$245,000 a year 9 hours ago Benefits Health insurance Paid time off Qualifications Program management Azure Security team coordination Incident management Team leadership General IT Controls IT policy development Regulatory compliance Security architecture risk management IT budget management Contract performance monitoring SOX Infrastructure architecture Crisis management (risk management strategy) Information & network security team management GDPR compliance expertise Hiring NIST standards Incident management operations support Vendor performance improvement Regulatory Frameworks (Architecture security) Vendor relationship management Contingency planning Contracts Vendor negotiation Vendor contract management Management reporting Cloud Architecture Design (Architecture design skills) Project contract management Financial management Full Job Description

POSITION SUMMARY

The Director of Cybersecurity leads the cybersecurity program — setting strategy, owning the organization's risk posture, and delivering executive

•and board-level cyber-risk reporting. The role builds and leads the internal security team, manages security vendors and their SLAs, and directs incident response and cyber resilience across a global footprint. The Director reports to the VP, IT Infrastructure & Cybersecurity, with an independent line for cyber-risk reporting.

KEY RESPONSIBILITIES

Set and own the cybersecurity strategy, program roadmap, and risk posture across a global footprint, anchored to

NIST CSF 2.0.

Deliver executive

•and board-level cyber-risk reporting. Manage security vendors and contracts; define and enforce SLAs and hold partners accountable to contracted obligations. Build and lead the internal security team and bring core security functions in-house from managed providers. Direct incident response and cyber resilience, including business continuity and disaster recovery. Establish cybersecurity governance, policy, and security-awareness programs. Own the cybersecurity budget and headcount plan.

FUNCTIONS OWNED

Security Leadership & Strategy

• Governance, Policy & Awareness

• Incident Response & Cyber Resilience (supports GRC, Risk & Compliance and AI Governance & Emerging Tech)

REQUIRED QUALIFICATIONS

12+ years in cybersecurity, including 5+ years leading security teams at manager/director level, ideally in a global, high-profile, or media/entertainment enterprise. Demonstrated ownership of an enterprise security program built on

NIST CSF 2.0

(or

ISO 27001

) — governance, policy, control framework, and a multi-year maturity roadmap. Track record building and leading an internal security function — hiring, developing, and retaining architects, engineers, and analysts — including insourcing functions from a managed provider (MSSP). Executive

•and board-level cyber-risk reporting; experience presenting to boards, audit/risk committees, and ownership or private-equity stakeholders, translating technical risk into business and financial terms. Enterprise risk management and multi-jurisdiction regulatory literacy across a global footprint — SOX ITGC and global privacy regimes (GDPR, CCPA/CPRA, PIPL). Proven vendor and contract management — negotiating and enforcing SLAs with MSSPs and holding them accountable to contracted obligations. Incident-response leadership — has directed the organization's response to a material security incident and owns cyber-resilience / BCP-DR direction. Security-budget ownership — has built and defended a security operating budget and headcount business case. Working architecture fluency across identity, cloud (Azure), data protection, and SASE — enough to direct architects and challenge technical designs. Bachelor's degree in a relevant field or equivalent experience; CISSP and/or CISM required.

PREFERRED QUALIFICATIONS

Private-equity portfolio-company experience, including M&A security due diligence and post-close integration. Media, entertainment, talent-representation, or high-net-worth-individual environment — elevated BEC/impersonation and privacy exposure. Experience standing up an independent cyber-risk reporting line or remediating findings from an external security assessment or audit. Experience insourcing security functions from a managed provider on a phased plan. Advanced credentials — CRISC, CCISO, or an

MBA / MS

in cybersecurity. Per local requirements and in the interest of transparency, the rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short

•and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.

Hiring Rate Minimum:

$183,750 annually (minimum will not fall below the applicable state/local minimum salary thresholds)

Hiring Rate Maximum:

$245,000 annually