Director, Digital Security

Fox•Los Angeles, CA

14h•$206,000 - $235,000•Hybrid

About The Position

The Director of Digital Security will play a mission-critical role in leading a dedicated engineering function focused on securing FOX’s suite of direct-to-consumer digital products, including high-scale platforms such as Tubi, FOX ONE, and other consumer-facing brand applications. This role is part of a newly created team of cybersecurity leaders and engineers tasked with advancing digital and cloud security across the enterprise. You will partner directly with senior leaders in product, infrastructure, engineering, and data science to define and execute a comprehensive digital security strategy that protects FOX’s digital services at scale. This is a hybrid leadership role that combines deep hands-on technical expertise with strategic acumen. You will be expected to roll up your sleeves to solve complex problems, mentor and guide engineering teams, and set the long-term vision for secure cloud infrastructure.

Requirements

10+ years of experience in cybersecurity with 3+ years in leadership roles.
Proven track record of building and leading high-performing engineering teams in cloud-native environments.
Excellent communication, stakeholder engagement, and executive reporting skills.
Strong experience in collaboration with product management teams.
Demonstrated experience in Enterprise grade or consumer facing digital products.
Expert-level knowledge of secure architecture patterns, with strong experience in identity, network, and application security.
Hands-on proficiency in building automation and tooling using Python, or equivalent.
Experience with AI enabled coding tooling desired.
Experience collaborating with security operations teams on infrastructure observability.
Experience with Linux based systems, containerization (Docker, Kubernetes), and DevOps pipelines.
Understanding of DNS, CDN, and application-layer defenses for modern web platforms.
Strong working knowledge of security frameworks (NIST, OWASP, SLSA, Zero Trust) and regulatory controls (SOX, GDPR, PCI).
Regular, on-site attendance at the workplace a minimum of 3 days per week is an essential function of the position. Selected candidate must be able to reliably meet this requirement.

Nice To Haves

Prior experience leading or scaling security functions within a media, entertainment, or OTT environment.
Security certifications in cloud (e.g., AWS Certified Security Specialty).
Experience managing multi-region cloud infrastructure at scale.
Familiarity with modern risk quantification methods and GRC platforms.

Responsibilities

Define FOX's digital security vision, strategy, and roadmap in alignment with business objectives and the broader enterprise security posture.
Serve as a trusted advisor to executive stakeholders on digital security risks, architecture decisions, and secure digital transformation.
Build and lead a high-performing team of cloud and digital security engineers.
Collaborate with product management to prioritize secure-by-design architecture for digital products.
Provide executive guidance and coordination during incidents relating to digital products and cloud environments as well as in vulnerability response efforts.
Guide application, data, and infrastructure teams to ensure security is integrated into the entire software development lifecycle.
Evangelize digital and cloud security best practices across FOX through education, documentation, and tooling.
Define secure digital product operating models aligned to frameworks such as NIST CSF, OWASP, SLSA, and Zero Trust.
Ensure compliance with applicable regulatory and industry standards (e.g., SOX, GDPR, CCPA) through secure design and operational rigor.
Serve as the technical liaison for internal and external audits related to digital product and cloud security posture.
Liaise with threat modeling, penetration testing, and policy enforcement across multiple digital products and cloud environments.
Drive secure patterns for multi-tenant application development, identity and access management (IAM), network segmentation, and data protection.
Direct the implementation of Infrastructure as Code (IaC) security practices, secure secrets management, and container security controls (e.g., Kubernetes).
Influence engineering and DevOps roadmaps to embed security-by-design and scalable guardrails across CI/CD pipelines and infrastructure.
Champion efforts to reduce overly broad permissions while preserving engineering velocity and system resilience.