Business Security Partner (L5), Consumer & Content

Netflix•,

9d•$400,000 - $680,000

About The Position

The Business Security Partner (BSP) team at Netflix comprises senior security advisors who work closely with business units rather than focusing on technical domains. Each BSP partner is responsible for a specific portfolio of business units, building relationships with their leadership, and acting as a security expert who understands these businesses well enough to advise on decisions proactively. They attend business reviews, participate in architecture discussions, and foster trust with stakeholders, making security a valuable resource. The overarching goal is to ensure that every significant business decision at Netflix is informed by clear, actionable security risk context, provided by a partner who understands both the risks and the business. This role specifically covers two dynamic areas within Netflix: Customer Service and Content Generation. For Customer Service, the BSP will be the primary security partner for a global support organization implementing AI capabilities in consumer-facing operations. This involves advising on the security risks of new technologies, assisting the organization in assessing and managing risks for systems handling large volumes of consumer data, and maintaining the security posture of a high-scale, global support environment. For Content Generation, the BSP will partner with teams developing next-generation GenAI/GenMedia production pipelines, including prosperity models, open-source tools, and third-party inference providers. The work will encompass evaluating third-party AI tools, securing compute infrastructure, governing training data, and making security control decisions for AI-assisted content workflows. This role also includes M&A responsibilities, requiring support for technical security due diligence for acquisitions and subsidiaries.

Requirements

Experience with securing GenAI systems, customer-facing deployments, and/or content generation / ML pipelines. Understanding of what makes AI systems distinct from traditional software.
Broad security domain knowledge across application security, cloud security, identity and access management, and data governance. Ability to operate across these domains and know when to focus deeply versus synthesize information.
Strong stakeholder partnership instincts. Ability to build trust with the business by demonstrating an understanding of their context, not just their security posture. Skill in translating technical findings into business decisions and back to the Security department for support.
Experience advising on security for consumer-facing systems, customer data environments, or high-scale operational technology.
Comfort with ambiguity and novel technology environments. A framework for reasoning under uncertainty and making recommendations when the answer is not fully known.

Nice To Haves

M&A or technical due diligence experience

Responsibilities

Own the security partnership for Customer Service and Creative Technology, building stakeholder relationships, learning how these businesses operate, and translating that context into opinionated security guidance.
Lead security risk assessments and treatment strategies with cross-functional teams as they launch new capabilities and tools.
Evaluate and advise on the security posture of GenAI/GenMedia - third-party tool evaluations, open-source model assessments, compute infrastructure security, and training data governance.
Maintain and evolve the Business Risk Profile for each business unit, prioritizing and driving remediation of the risks that matter most.
Support M&A technical security due diligence for acquisitions and subsidiaries.
Develop reporting and metrics that communicate risk posture and business security initiatives to SPA leadership and business unit stakeholders.