Match score not available
Security Compliance Assessor
Remote:
Full Remote
Salary:
56 - 58K yearly
Job description
Business Unit: Company 3
Position: Security Compliance Assessor
Location: Santa Monica, CA (Remote)
Hours of Operation: 9:00am - 6:00pm EST or PST
*Pay Range: $29.00 - $30.00 USD hourly
POSITION SUMMARY:
Company3/Method Studios (CO3/Method) is a global leader in media and entertainment services for film, video and online content. With operations in Los Angeles, New York and around the globe, the company employs over 2,500 of the most talented, highly honored, and recognized artists and industry veterans worldwide.
The Security Compliance Assessor is responsible for ensuring the security and compliance of all information systems, data, and operations within the media and entertainment facility. This role will play a critical part in maintaining a secure and reliable environment that aligns with industry best practices, including the Motion Picture Association (MPA) guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework
MAIN DUTIES:
Governance, Risk & Compliance (GRC): The Security Compliance Assessor will draft, maintain, and regularly review policies and procedures related to GRC for physical, administrative, and information systems (IS) environments. They will conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities, as well as monitor and analyze security incidents and implement appropriate response and remediation plans.
Auditing & Compliance: The Security Compliance Assessor will participate in external audits of CO3 facilities and operations conducted by third-party auditors, conduct regular internal audits of studios to assess compliance with CO3 policies and industry standards, and daft comprehensive audit reports that clearly convey findings to systems owners and executives, including recommendations for corrective actions.
Security Controls: They will establish and maintain internal controls aligned with the NIST Cybersecurity Framework to safeguard sensitive data and systems, and implement and manage security controls, including access control, intrusion detection/prevention systems, and data loss prevention measures.
The Security Compliance Assessor will also be responsible for the following:
Security Awareness & Training:
WHAT YOU BRING:
The ideal candidate will be experienced in the information systems or computer science field, and must have solid experience in developing, implementing, and maintaining GRC frameworks. This includes risk assessments, threat modeling, and policy/procedure development. They must be able to demonstrate a deep understanding of the unique security challenges and regulatory landscape within the media and entertainment sector and be experienced with conducting both internal and external audits, analyzing findings, and producing clear, concise reports with actionable recommendations. Additional desired skills include:
ABOUT THE COMPANY:
Company 3, including its various business units and family of brands, provides a full range of Creative Services for content creators, including conceptual design, pre-vis, look development, ideation and rapid prototyping, 3D animation/CGI, motion graphics/designers, matte painting, compositing, dailies and production services, color grading, post-production finishing, marketing/trailers, live-action production, experiences, and more.
Diversity and Inclusion at Company 3:
Creativity has diversity at its core. We celebrate the value of each unique experience by being dedicated to fostering the most diverse, equitable, and inclusive culture where every employee feels empowered and safe to show up to work as their full self.
It is our policy to provide equal employment opportunities to all applicants and employees. Please inform the Company's HR representative if you need assistance completing any forms or otherwise need any accommodation or support in order to participate in the application process.
*The listed pay range represents the lowest to highest range that we in good faith believe we would pay for this role at the time of this posting. This range may be modified in the future. An employee’s pay position within the range may be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, local currency exchange rates, performance, shift, travel requirements, sales or revenue-based metrics, applicable law, and business or organizational needs.
The benefits for eligible part-time employees working 25 or more hours per week and full-time employees in the US include a comprehensive package of health, retirement, and insurance benefits and paid time off. The benefits for eligible project hires and part-time employees working less than 25 hours per week in the US include retirement, select insurance benefits, and where required by law, health benefits. For roles filled in Canada and other territories, local benefits plan offerings as adopted and amended from time to time will apply.
The above compensation and benefits information is provided in accordance with various state, provincial, and local pay transparency laws.
This position is for an existing vacancy. Both external and internal candidates can apply for this role through the Company’s Career Page. The Company generally only contacts those individuals who have submitted an application which it wishes to interview. The application window for this position is expected to close by May 15, 2025.
Position: Security Compliance Assessor
Location: Santa Monica, CA (Remote)
Hours of Operation: 9:00am - 6:00pm EST or PST
*Pay Range: $29.00 - $30.00 USD hourly
POSITION SUMMARY:
Company3/Method Studios (CO3/Method) is a global leader in media and entertainment services for film, video and online content. With operations in Los Angeles, New York and around the globe, the company employs over 2,500 of the most talented, highly honored, and recognized artists and industry veterans worldwide.
The Security Compliance Assessor is responsible for ensuring the security and compliance of all information systems, data, and operations within the media and entertainment facility. This role will play a critical part in maintaining a secure and reliable environment that aligns with industry best practices, including the Motion Picture Association (MPA) guidelines and the National Institute of Standards and Technology (NIST) Cybersecurity Framework
MAIN DUTIES:
Governance, Risk & Compliance (GRC): The Security Compliance Assessor will draft, maintain, and regularly review policies and procedures related to GRC for physical, administrative, and information systems (IS) environments. They will conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities, as well as monitor and analyze security incidents and implement appropriate response and remediation plans.
Auditing & Compliance: The Security Compliance Assessor will participate in external audits of CO3 facilities and operations conducted by third-party auditors, conduct regular internal audits of studios to assess compliance with CO3 policies and industry standards, and daft comprehensive audit reports that clearly convey findings to systems owners and executives, including recommendations for corrective actions.
Security Controls: They will establish and maintain internal controls aligned with the NIST Cybersecurity Framework to safeguard sensitive data and systems, and implement and manage security controls, including access control, intrusion detection/prevention systems, and data loss prevention measures.
The Security Compliance Assessor will also be responsible for the following:
Security Awareness & Training:
- Develop and deliver comprehensive security awareness training programs for all employees, covering topics such as phishing, social engineering, and best practices for data handling and protection.
- Track employee training completion and maintain records of training activities.
- Participate in cybersecurity simulation events and tabletop exercises to test and refine incident response plans.
- Assist in the investigation and resolution of security incidents, including data breaches and cyberattacks.
- Stay abreast of the latest security threats, vulnerabilities, and best practices in the media and entertainment industry.
- Maintain knowledge of relevant industry standards and regulations, including those related to data privacy (e.g., GDPR, CCPA).
WHAT YOU BRING:
The ideal candidate will be experienced in the information systems or computer science field, and must have solid experience in developing, implementing, and maintaining GRC frameworks. This includes risk assessments, threat modeling, and policy/procedure development. They must be able to demonstrate a deep understanding of the unique security challenges and regulatory landscape within the media and entertainment sector and be experienced with conducting both internal and external audits, analyzing findings, and producing clear, concise reports with actionable recommendations. Additional desired skills include:
- NIST Cybersecurity Framework Knowledge: Demonstrated understanding and ability to apply the NIST Cybersecurity Framework within a real-world setting.
- Communication & Collaboration: Excellent written and verbal communication skills are essential for interacting with various stakeholders (executives, technical teams, auditors). Must be comfortable speaking to large, diverse groups. Ability to convey complex information clearly and concisely. Ability to communicate with users of varying technical knowledge.
- Project Management: Ability to manage multiple projects simultaneously, prioritize tasks effectively, and meet deadlines.
- Adaptability: Ability to work under pressure in a dynamic environment.
- Incident Response Experience: Prior experience in incident response activities, including investigations, containment, and remediation.
- Data Privacy Expertise: Familiarity with relevant data privacy regulations (GDPR, CCPA, etc.) and how they impact the media and entertainment industry.
- Technical Certifications: Relevant security certifications (e.g., CISSP, CISM, CISA) are a plus.
- Scripting/Automation: Basic scripting skills (e.g., Python, PowerShell) can be beneficial for automating tasks and improving efficiency.
- Cloud Security Knowledge: Familiarity with cloud security concepts and best practices, particularly relevant to cloud-based media and entertainment services.
- Experience with industry-specific tools: Familiarity with tools commonly used in the media and entertainment industry for security monitoring, threat intelligence, or compliance management.
- Technical Proficiency: Familiarity with common security controls (access control, IDS/IPS, DLP), and an understanding of how these technologies work within the context f a media & entertainment organization.
- Technical Understanding: Understanding and experience with endpoint, application, and network security, identity and access management, incident response, and vulnerability management.
- Networking Expertise: Demonstrated knowledge of networking best-practices and security protocols.
ABOUT THE COMPANY:
Company 3, including its various business units and family of brands, provides a full range of Creative Services for content creators, including conceptual design, pre-vis, look development, ideation and rapid prototyping, 3D animation/CGI, motion graphics/designers, matte painting, compositing, dailies and production services, color grading, post-production finishing, marketing/trailers, live-action production, experiences, and more.
Diversity and Inclusion at Company 3:
Creativity has diversity at its core. We celebrate the value of each unique experience by being dedicated to fostering the most diverse, equitable, and inclusive culture where every employee feels empowered and safe to show up to work as their full self.
It is our policy to provide equal employment opportunities to all applicants and employees. Please inform the Company's HR representative if you need assistance completing any forms or otherwise need any accommodation or support in order to participate in the application process.
*The listed pay range represents the lowest to highest range that we in good faith believe we would pay for this role at the time of this posting. This range may be modified in the future. An employee’s pay position within the range may be based on several factors including, but limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, local currency exchange rates, performance, shift, travel requirements, sales or revenue-based metrics, applicable law, and business or organizational needs.
The benefits for eligible part-time employees working 25 or more hours per week and full-time employees in the US include a comprehensive package of health, retirement, and insurance benefits and paid time off. The benefits for eligible project hires and part-time employees working less than 25 hours per week in the US include retirement, select insurance benefits, and where required by law, health benefits. For roles filled in Canada and other territories, local benefits plan offerings as adopted and amended from time to time will apply.
The above compensation and benefits information is provided in accordance with various state, provincial, and local pay transparency laws.
This position is for an existing vacancy. Both external and internal candidates can apply for this role through the Company’s Career Page. The Company generally only contacts those individuals who have submitted an application which it wishes to interview. The application window for this position is expected to close by May 15, 2025.
Required profile
Experience
Spoken language(s):
English
Check out the description to know which languages are mandatory. Hard Skills
Other Skills
- Collaboration
- Communication
- Adaptability
Related jobs
Career Opportunities: Field Service Technician (24574)
Career Opportunities: Field Service Technician (24574)
Today
Cargotec Sweden AB
- 67 - 73K
- Remote: Finland
Estágio em Direito
Estágio em Direito
Today
Nelson Wilians Advogados
- Internships
- 48 - 48K
- Remote: Brazil
Sales Manager, Gallery Partnerships (Japanese, Korean, Mandarin or Cantonese Speaking)
Sales Manager, Gallery Partnerships (Japanese, Korean, Mandarin or Cantonese Speaking)
Today
Artsy
- Remote: Hong Kong
SAP Security
SAP Security
Today
Pantheon Inc
- Remote: Brazil
Sports Betting Ambassador - Peterborough (Part Time)
Sports Betting Ambassador - Peterborough (Part Time)
Today
betstamp
- Part time
- 1 - 30K
- Remote: United Kingdom, Canada