Business Information Security Officer

Warner Bros Discovery Warner Bros Discovery · Media · Shanghai, Shanghai, China · Technology

This role is for a Business Information Security Officer at Warner Bros. Discovery in Shanghai. The primary responsibilities include managing the MSSP engagement, overseeing security projects, evaluating security solutions, identifying and reporting key risk indicators, promoting security awareness, handling security exceptions, enforcing company policies, supporting regulatory compliance, assisting with incident response, and aligning with the global Information Security program. The role requires a Bachelor's degree or 10+ years of technical security experience, including supervisory or management experience, and experience working in international and multinational environments.

What you'd actually do

  1. Own and manage the MSSP engagement for Cyber Security, including contract governance, vendor relationship management, and service performance over sight. Act as the primary Service Delivery Manager (SDM) and single point of contact, ensuring effective delivery against agreed SLAs, KPIs, and security outcomes.
  2. Provide direction and supervision on security-related projects and initiatives, ensuring compliance with security standards and best practices.
  3. Evaluate and recommend security solutions and tools that enhance the security posture and capabilities of the Studio Tour.
  4. Lead the identification of key risk indictors (KRI’s) for WB Studio Tour Shanghai operations; driving the analytics, metrics gathering and reporting of KRI’s to the General Manager, Audit Committee, Board of Directors and WBD leadership (as required).
  5. Promoting a culture of security awareness and accountability with the Studio Tour Leadership Team.

Skills

Required

  • Bachelor’s degree in computer science, Engineering, or other related discipline preferred or 10+ years of previous technical security experience
  • 10+ years of supervisory or management experience in a technical security environment
  • Demonstrable experience of working within an international team and a multinational company
  • Experience in leading projects leveraging global teams with matrix resources
  • Extensive experience in the information security

What the JD emphasized

  • security standards
  • security solutions
  • risk indicators
  • security awareness
  • security operations
  • cyber security incidents
  • Information Security program
  • security culture
  • technical security measures