Head of Information Security

ITV America•Stamford, CT

4d•Onsite

About The Position

The Head of Information Security is responsible for establishing and leading ITV America's information security program with a focus on Content Security, Cyber Security, and AI Security. Based out of the CT office, this role dual reports to the SVP, Technology and CTO. The Head of InfoSec will build and mature the security function to protect ITV America's intellectual property, production content, corporate systems, and AI-driven initiatives.

Requirements

10+ years of experience in information security, cybersecurity, or a related field, with at least 5 years in a senior leadership role.
Expertise in cybersecurity frameworks (NIST, ISO 27001, CIS Controls) and risk management methodologies.
Strong knowledge of content security practices and media industry security standards (MPAA, TPN).
Excellent leadership, communication, and stakeholder management skills plus the ability to adapt and work within a team environment across multiple areas of the business.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
Experience in media, entertainment, or television production security.
CISSP, CISM, CISA, or equivalent security certifications.
Familiarity with cloud security (AWS, Azure) and zero-trust architecture.
Project Management and oversight of Finance Systems such as Oracle
Knowledge of AI/ML security risks, adversarial attacks, and AI governance.
Experience with MPAA content security best practices and TPN assessments.

Responsibilities

Design, implement, and lead ITV America's comprehensive information security strategy encompassing content, cyber, and AI security.
Establish and manage content security protocols to protect pre-release programming, intellectual property, and sensitive production materials.
Develop and enforce cybersecurity policies, procedures, and incident response plans across all US operations while working in conjunction with ITV UK’s cyber security and IT teams.
Manage Corporate Data Centers and lead security assessments, penetration testing, and vulnerability management programs.
Create and implement AI security frameworks to govern the secure use of AI tools, data handling and integrity.
Manage Network Engineering team and IT infrastructure as well as coordinate with external security vendors to maintain robust network infrastructure security.
Oversee regulatory compliance (SOC 2, GDPR, CCPA, MPAA) and manage audit processes.
Conduct security awareness training and foster a culture of security consciousness across the organization.
Investigate and respond to security incidents, data breaches, and emerging threats in a timely manner.
Advise the CTO and SVP, Technology on security risks, investments, and strategic priorities.