Director, Infrastructure Security Services

The Director, Infrastructure Security Services will be a key member of the new Versant Cyber organization. This individual is responsible for protecting the organization’s foundational systems and communication platforms. This role will define the design, implementation, and management of systems, processes, and teams that protect against cyber threats and ensure the integrity, confidentiality, and availability of critical IT assets. This individual reports directly to the VP, Identity and Security Services and will interact with various key stakeholders within the Cyber organization and drive relationship management across the Versant business areas.  RESPONSIBILITIES: The Director of Security Services will lead the design, delivery, and ongoing enhancement of enterprise-wide security capabilities to protect the applications, data, networks, broadcast platforms, and systems of a leading cable and media company. This leader will be accountable for ensuring the resiliency, availability, and trustworthiness of security services, leveraging advanced tools and modern architectures to safeguard both business-critical infrastructure and customer-facing platforms. This role requires expertise across the spectrum of enterprise, cloud, and content delivery environments, as well as the ability to balance business enablement, regulatory compliance, and consumer trust. Define and implement the enterprise security services strategy across cable, broadcast, digital media, and corporate IT environments. Develop multiyear roadmaps for evolving security services to address emerging threats, regulatory requirements, and business growth. Advise executive leadership on risk posture, threat landscape, and prioritization of investments in security technology. Define KPIs and performance metrics for availability, detection coverage, incident response, and compliance. Ensure compliance with industry regulations and frameworks (e.g., FCC, GDPR, SOX, PCI DSS, NIST CSF). Drive operational efficiency while maintaining SLAs and resiliency for mission-critical services. Partner with IT, broadcast operations, and business units to embed security into all stages of service delivery. Foster a culture of collaboration, continuous learning, diversity, and innovation. Lead high-performing teams of engineers and specialists delivering 24x7 security services. Network & Infrastructure Security DNS security & resilience (e.g., Infoblox, Akamai). Network segmentation, micro-segmentation, and Zero Trust models. VPN, ZTNA, and secure access solutions. Application & API Security Web application security & bot management (e.g., Shape Security, Akamai Bot Manager). Secure software development lifecycle (SSDLC) and shift-left testing. API security (e.g., Salt Security, Apigee). Code & dependency scanning (e.g. Veracode). Data Security & Privacy Data Loss Prevention (DLP) tools and policies. Encryption, key, and secrets management (e.g., HashiCorp Vault, HSM). Cloud security posture management (CSPM) and data classification (e.g., Wiz, Netskope). Insider threat monitoring. Threat Detection, Logging, and Response Centralized logging and SIEM platforms (e.g., Splunk, Elastic). Security Orchestration, Automation, and Response (SOAR) platforms. Threat intelligence integrations & dynamic blocklists (e.g., Cyber Dynamic Lists, ISAC feeds). Endpoint Protection. Media & Content Security Digital Rights Management (DRM) & conditional access for broadcast and streaming. Anti-piracy and content protection services (e.g., watermarking, takedown services). Content distribution and CDN security. Cloud & Emerging Technology Security Cloud workload protection and compliance monitoring (AWS, Azure, GCP). CASB (Cloud Access Security Broker) for SaaS protection. Secure API gateways and service meshes. Preparation for AI/Agentic system security and monitoring.