Dow Jones

Sr. Director, BISO

NYC - 1211 Ave of the Americas Full time

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, or disability status.  EEO/Disabled/Vets

Job Description :

Position - Cyber Security BISO

Location - NYC

Hybrid - 3 Days in office

As a global media and information services company, News Corp understands the importance of cybersecurity and mitigating risk across the organization.  We believe in protecting our businesses and customers and are looking to build innovative solutions that will allow us to become a global leader in cybersecurity.  If cybersecurity is your passion and you want to be part of a cutting edge team, we want to hear from you!

The Director of Cyber Risk will be the primary point of contact for the assigned business unit and supports the implementation of the Global Cybersecurity program. As a trusted advisor, this individual will collect business requirements and risks, and will provide advice and oversight to ensure the business is compliant with required policies.  Combining business acumen with technical knowledge, this role assists in improving the security posture with respect to delivering services and partnering with business unit leadership. This role will understand the key assets and processes, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary. Additionally, the individual will ensure business compliance with Security Policy and Standards while continuously monitoring and reporting on risks and documented exceptions.

Job Responsibilities:

  • Develop and maintain in depth understanding of business unit processes, crown jewels, physical locations, systems, technologies, data, customers, partners

  • Oversee PCI, with  SOX and ISO 27001 initiatives, support internal technology audits, as well as support Privacy on GDPR/CCPA initiatives

  • Oversee Client Assurance initiatives including responses to customer questionnaires, facilitate customer meetings and audits, and support Legal with the review of customer contracts. 

  • Understand business unit strategy and roadmaps to ensure security is embedded at the right control points

  • Act as the primary local security contact / adviser for technology, news, legal, finance, audit, compliance, product leadership

  • Run the monthly Cyber Risk Steering Committees and quarterly CEO briefings for the assigned business unit to ensure stakeholders are kept abreast of risks, threats, program maturity and projects

  • Lead the development of unit specific security strategy

  • Drive implementation of the Security Policies and Standards across the assigned business unit

  • Proactively identify non-compliance and areas of potential improvement, and facilitate development and deployment of standard solutions

  • Provide regular and timely reporting on the status of cybersecurity across the business unit

  • Engage with the Incident Response Team (IRT) and provide escalation path for security issues, incidents and inquiries

  • Work with the Cyber Defense, Product Security Engineering, Enterprise Security towers to assist in effectively driving program maturity

 

 Qualifications:

  • Minimum of 10-15 years of professional working experience

  • A Bachelor’s degree in Technology, Legal, Computer Science/Engineering, Cybersecurity, a related field or experience

  • Must have a strong understanding of security compliance, policy management, security frameworks (NIST) and regulations.

  • Solid foundation of security architectures and cloud computing environments

  • Excellent communication skills. Ability to effectively communicate, both orally and in writing, through all levels of the organization and with customers

  • Excellent problem solving, critical thinking, and analytical abilities

  • International work experience or experience working as part of a globally dispersed team is a plus

  • Comfortable working in matrixed organizations

  • CISSP or CRISC certifications not required but highly referred

 

About News Corp

News Corp is a global diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers and businesses throughout the world. The company comprises businesses across a range of media, including: news and information services, book publishing, digital real estate services, cable network programming.

Job Category:

Pay Range: $210,000 - $245,000 + Bonus

We recognize that attracting the best talent is key to our strategy and success as a company. As a result, we aim for flexibility in structuring competitive compensation offers to ensure we are able to attract the best candidates. The quoted salary range represents our good faith estimate as to what our ideal candidates are likely to expect, and we tailor our offers within the range based on the selected candidate's experience, industry knowledge, location, technical and communication skills, and other factors that may prove relevant during the interview process.

Pay-for-performance is a key element in our strategy to attract, engage, and motivate talented people to do their best work. Similarly to salary, for bonus eligible roles, targets are set based on a variety of factors including competitive market practice.

For benefits eligible roles, in addition to cash compensation, the company provides a comprehensive and highly competitive benefits package, with a variety of physical health, retirement and savings, caregiving, emotional wellbeing, transportation, and other benefits, including "elective" benefits employees may select to best fit the needs and personal situations of our diverse workforce.