Business Security Partner (L5)

Netflix•,

4d•$400,000 - $680,000

About The Position

The Business Security Partner (BSP) team at Netflix consists of senior security advisors who focus on business proximity rather than technical domains. Each BSP partner is responsible for a specific portfolio of business units, cultivating long-term relationships with BU leadership, and acting as the security expert who understands these businesses well enough to advise on decisions before they are made. BSPs participate in business reviews and architecture conversations, building trust with stakeholders to make security a resource rather than a requirement. The overarching goal is to ensure that every major business decision at Netflix has access to clear, usable security risk context, providing actionable guidance from a partner who understands both the risk and the business. This specific role covers two dynamic areas within Netflix: Marketing and Animation. The BSP team often rotates business units based on need, so coverage may expand to other areas during your tenure. The role involves right-sizing risk while enabling business outcomes. For Marketing, the focus will be on providing security partnership to teams involved in Consumer Products, Brand, Events, Experiences, and Social Media, as well as the external agencies and vendors that handle pre-release campaign content. This includes advising on the security risks associated with GenAI tools being developed and adopted by Marketing teams, assessing vendors and Business Process Outsourcing partners handling sensitive creative assets, and governing access controls for Netflix’s social media accounts. For Animation, the role serves as the dedicated security partner for Netflix Animation. Responsibilities include assessing security risks within the animation production pipeline, promoting the alignment of legacy systems with Netflix standards, and advising on architectural decisions impacting the protection of pre-release animated content. The fast-paced nature of business and legacy integration work requires the ability to engage credibly with engineering and leadership on complex, technically interdependent risks. Additionally, this role includes M&A responsibilities, where BSPs are expected to support technical security due diligence for acquisitions and subsidiaries.

Requirements

Experience operating as a security partner or advisor. You’ve built trust with business stakeholders, translated technical risk into business language, and driven decisions without direct authority.
GenAI security depth. You have direct experience advising on or assessing security risks in GenAI systems. You can identify real risks and engage credibly with technical teams, legal, and privacy partners to mitigate them.
Broad security domain knowledge across application security, cloud security, identity and access management, and data governance. You are comfortable operating across all of them and know when to go deep versus when to synthesize, practicing business awareness on how to communicate. You pull in domain experts from across the wider security organization, where needed, to help assess and address risks.
Strong stakeholder partnership instincts. You build trust with the business by demonstrating that you understand their context, not just their security posture. You know how to translate a technical finding into a business decision, and back to the Security department for support.
Comfort with ambiguity and novel technology environments. You have a framework for reasoning under uncertainty and for making recommendations when the answer isn't fully known.

Nice To Haves

M&A or technical due diligence experience is a plus and not required.

Responsibilities

Own the security partnership for Marketing and Animation, building stakeholder relationships, learning how these businesses operate, and translating that context into opinionated security guidance.
Lead security risk assessments and treatment strategies with cross-functional teams as they launch new capabilities and tools.
Evaluate and advise on the security risk of GenAI tool adoption across both business units. Set conditions of approval, assess training data provenance and data handling, and partner with Legal and Privacy on unified guidance.
Maintain and evolve the Business Risk Profile for each business unit, prioritizing and driving remediation of the risks that matter most.
Advance pre-release content protection in partnership across both business units: campaign assets and creative content in Marketing, and animation production pipelines and studio workstation environments. Coordinate with Content Security and partner SPA teams to ensure controls match the sensitivity of what’s in scope.
Support M&A technical security due diligence for acquisitions and subsidiaries.
Develop reporting and metrics that communicate risk posture and business security initiatives to SPA leadership and business unit stakeholders.