VP, Cybersecurity Operations and Engineering

TKO•New York, CT

53d•$225,000 - $300,000

About The Position

The VP, Cybersecurity Operations & Engineering is responsible for leading and maturing the enterprise cybersecurity Operations and Engineering programs with oversight on Cybersecurity program execution, and risk management, while leading cybersecurity operations and engineering capabilities. This leader partners across Cybersecurity, technology, legal, compliance, privacy, and business units to align and articulate strategy, operationalize policy, strengthen controls, improve resilience, and provide measurable security outcomes across a complex global environment. The ideal candidate brings a strong blend of executive leadership, program & project management discipline, technical depth, and business partnership. They are equally effective shaping long-range roadmaps, communicating across all levels of an enterprise, driving control maturity, and ensuring day-to-day operational readiness across detection, response, vulnerability management, security engineering, risk management, and threat-informed defense.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
12+ years of progressive cybersecurity experience, including leadership of enterprise security programs in complex, high-growth, or globally distributed organizations.
7+ years of leadership experience managing managers, cross-functional teams, and/or external service providers across multiple cybersecurity domains.
Demonstrated success building or maturing cybersecurity governance, program management, security operations, and security engineering capabilities.
Strong working knowledge of cybersecurity frameworks, regulatory requirements, and assurance practices, including NIST CSF, ISO 27001, PCI-DSS, SOC, SOX, data privacy, and related standards.
Experience leading or overseeing incident response, threat intelligence, vulnerability management, detection engineering, and security monitoring programs.
Strong technical understanding of cloud security, identity and access management, endpoint protection, network security, logging and monitoring, system hardening, and enterprise security architecture.
Experience working closely with software development and infrastructure teams to integrate security into lifecycle management, architecture, and operational processes.
Proven ability to define metrics, communicate risk clearly, and present meaningful security insights to operational, technical, and executive stakeholders.
Strong business judgment and the ability to balance risk reduction, operational efficiency, and strategic enablement.
Excellent written and verbal communication skills, with the ability to influence across all levels of the organization.

Nice To Haves

Master’s degree in a relevant discipline.
CISSP or comparable industry certification.
Experience in media, entertainment, sports, or other fast-paced global operating environments.
Experience overseeing a hybrid model that includes internal teams and managed security partners.
Experience building metric-driven security programs and using automation to streamline cyber workflows.

Responsibilities

Lead the enterprise cybersecurity operations & engineering programs, including documenting strategy, risk governance, organization roadmap development, budgeting, KPI reporting, and preparing executive communications.
Contribute to cybersecurity policies, standards, procedures, and control frameworks aligned to business objectives and risk appetite.
Develop and maintain governance forums, steering committee materials, risk updates, and decision-supporting business cases for senior leadership.
Partner with legal, compliance, privacy, internal audit, and technology stakeholders to strengthen the company’s overall security, regulatory, and governance posture.
Drive consistent security practices across corporate, cloud, application, and business environments, ensuring alignment with enterprise architecture and operating models.
Translate threat, control, and assessment findings into practical, risk-informed recommendations and prioritized remediation plans.
Provide executive oversight for security operations, including SOC and/or MSSP performance, alert monitoring, incident triage, escalation management, and operational readiness.
Own and mature incident response planning, operational runbooks, tabletop exercises, and cross-functional response coordination with technology, legal, HR, and compliance teams.
Oversee threat intelligence, threat detection, threat hunting, and vulnerability management capabilities to improve visibility, response speed, and control effectiveness.
Ensure the organization is prepared to protect, detect, respond to, and recover from cybersecurity events affecting critical systems, intellectual property, data, and brand reputation.
Develop and monitor operational metrics and service-level indicators for security operations, incident management, remediation progress, and program effectiveness.
Oversee the design, implementation, enhancement, and lifecycle management of cybersecurity technologies and control capabilities across on-premises, cloud, endpoint, identity, and network domains.
Partner closely with infrastructure, platform, and software engineering teams to embed security into enterprise architecture, system design, and operational workflows.
Support secure development lifecycle practices, software assurance, secure coding, and application security initiatives across internal and customer-facing environments.
Guide the selection and optimization of security tools and services, including SIEM, EDR, IDS/IPS, firewalls, vulnerability management, logging, monitoring, and related protection technologies.
Promote automation, orchestration, and process simplification to improve scalability, consistency, and efficiency across cybersecurity operations and engineering.
Lead cyber risk assessments across infrastructure, applications, vendors, business processes, and emerging technology initiatives.
Support compliance and control maturity efforts related to frameworks and obligations such as NIST, ISO 27001, PCI-DSS, SOC, SOX, GDPR, privacy, and other applicable requirements.
Provide security leadership for vendor and third-party reviews, architectural reviews, major initiatives, and transformation programs.
Build trusted relationships with business and technology leaders to ensure security enables growth, resilience, and informed risk-taking.
Champion security awareness, education, and culture-building efforts that improve employee behavior and strengthen organizational readiness.
Lead, coach, and develop high-performing cybersecurity managers and individual contributors across program, operations, and engineering functions.
Foster a culture of accountability, collaboration, continuous improvement, and service-oriented partnership.
Mentor technical teams on incident response, operational excellence, architectural decision-making, and effective communication with executive and non-technical audiences.