Technology & InfoSec

• Strategic Vision: Develop and articulate a comprehensive security architecture strategy for application, data and cloud for Sony Pictures information and content assets. Continuously evaluate emerging threats and industry best practices to evolve our security posture.
• Define, document, and promote security architecture, DevSecOps, and technical standards throughout Sony Pictures.
• Lead the development and implementation of comprehensive security architecture strategies for application, data and cloud environments to protect against current and emerging threats.
• Architecture Design and Engineering: Lead hands-on design and implementation reviews of security solutions across application, data and cloud domains. Thoroughly assess security risks in existing and planned systems and infrastructure. Define technical security standards and governance processes.
• Lead security architecture review processes, ensuring all new systems and changes to existing systems comply with Sony’s security standards.
• Conduct in-depth assessments of current security architectures, identify threats and vulnerabilities, and develop mitigation strategies.
• Recommend design patterns and security best practices for technology and application implementations.
• Security Solution Evaluation and Selection: Research, evaluate, and recommend cutting-edge security technologies and tools. Oversee proof-of-concept initiatives and guide vendor selection.
• Conduct market research to assess the landscape of available security solutions in specific areas (e.g., data security, cloud security, application security).
• Liaise with IT and security operations teams to define and orchestrate POC testing for shortlisted security solutions.
• Enterprise Security: Work closely with IT infrastructure, application development, DevSecOps, and business stakeholders to embed application security principles throughout all phases of technology development and deployment.
• Develop and maintain security architecture documentation and standards.
• Collaborate with IT and business units to integrate security best practices into the development lifecycle of projects and technology initiatives.
• Governance and Compliance Maintain a deep understanding of security regulations and frameworks (e.g., NIST, ISO 27001, PCI DSS, OWASP, SAFECode) for designing systems and processes that not only protect data but also demonstrate adherence to industry standards and regulations.

We are seeking a visionary and hands-on Executive Director of Security Architecture with mature skill in Application Security/DevSecOps, Data Security and Cloud who will excel in leading the strategic design, implementation, and continuous improvement of Sony Pictures application security posture. This is a highly influential role, requiring both deep technical expertise and business-aligned leadership. The ideal candidate will have previous experience in application architecture and engineering and is now focused on information and cybersecurity to define robust security design patterns, reference architecture across applications, data, and cloud environments, proactively addressing cyber risks and promoting secure coding practices aligned with the Sony Pictures goals., Technical Skills

• Mastery of Security Architecture Principles: Deep understanding of defense-in-depth strategies, zero-trust models, identity and access management (IAM), AI Security, Product Security, Threat modeling, GPDR and privacy, vulnerability assessment techniques, DevSecOps, Secure Coding Principles and Practices.
• Application Security Expertise: Demonstrated experience with Full Stack WebApp/API, firewalls (WAFs), secure software development lifecycles (S-SDLCs), DevSecOps, IaC, Docker/Container Security, Data Security, static/dynamic application security testing (SAST/DAST), API security, Authentication/Authorization Best Practices, and Secure Coding Standards and Techniques.
• Cloud Security Expertise: Proficient in cloud security models (IaaS, PaaS, SaaS), cloud-native security tools, encryption and key management, privileged access management (PAM), security posture and compliance within cloud environments, mainly AWS and Azure.
• Network Security Expertise: Excellent knowledge of firewalls, intrusion detection/prevention systems (IDS/IPS), network segmentation, VPNs, network access control (NAC), DMZ design, and DDoS mitigation.
• Proficiency in Major Frameworks: Demonstrated knowledge of NIST Cybersecurity Framework, ISO 27001/27002, PCI DSS (if handling payment card data), OWASP, SAFECode, and other relevant entertainment industry guidelines such as TPN and MotionLabs.
• Translation to Practice: The ability to take concepts from frameworks and benchmarks and apply them practically to the design of security solutions. This includes mapping controls, risk assessment techniques, and documentation in alignment with standards.

Leadership Skills

• Leadership: Strong ability to lead, motivate, and develop a team of security professionals. Foster a collaborative and results-oriented environment.
• Strategic Thinking: Capacity to align security objectives with Sony broader business and Cybersecurity goals, effectively quantifying risks and prioritizing initiatives for optimal impact.
• Communication and Influence: Excellent written and verbal communication skills. The ability to translate technical concepts for non-technical audiences and secure buy-in at the executive level.
• Problem-solving: Analytical mindset with demonstrated adeptness in solving complex security challenges.
• Adaptability: Ability to thrive in a dynamic, fast-paced environment where technologies and threat landscapes rapidly evolve.

Education and Experience

• Bachelor’s degree in Computer Science, Information Security, or a related field. Advanced technical certifications strongly preferred (CISSP, CCSP, CSSLP, OSCP, or vendor-specific architecture and security certifications).
• Minimum of 10+ years of progressive experience in cybersecurity, application security engineering, with at least 5+ years in a security architecture leadership role with hands-on experience.

The anticipated base salary for this position is $205,000-$258,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

Be a part of a diverse, inclusive and collaborative culture that focuses on professional development, high performance and growth by leveraging structured programs that include OKRs (stretch for amazing) and modern development planning tools (e.g. competency model). Check out the top traits we’re looking for and see if you have the right mix.

• trusted partner
• innovative problem solver
• strategic thinker
• change agent
• effective communicator
• learner and developer

At the heart of our creative entertainment company lies a deep commitment to technology, driving innovation across film, television, interactive media, and more. An agile, fast-paced environment empowers team members to solve complex, business-critical challenges while embracing cutting-edge tools, technical excellence, and imaginative thinking.

From our innovative technology-driven production studios to our dynamic Information Technology and Information Security teams to the people who support our creative talent and protect our content, help us forge the future of entertainment at Sony Pictures - where creativity meets technology to inspire audiences worldwide!, The constant evolution of technology and its role in shaping the entertainment industry is what excites me most. Working at Sony Pictures Entertainment has amplified this passion, exposing me to a world of innovation where I get to collaborate with incredibly diverse teams from around the globe. This unique opportunity to contribute to a global enterprise, including my relocation from Brazil to Miami, has given me a new appreciation for how technology connects us all. I am very proud to be part of a company that values inclusivity and pushes the boundaries of what’s possible. Cristiane Kadooka Executive Director, Regional IT - Latin America

I love working at SPE because of the incredible people-collaborative, welcoming, and genuinely passionate about what they do. As part of the IT team, I get to work on exciting new projects and explore advanced technologies that are shaping the future of our industry and business. Every day brings new opportunities to learn, grow, and make a meaningful impact. It’s a dynamic environment that supports your career development and makes you feel proud to be here. Alex Kim Executive Director, Corporate IT - Culver City