Who are we hiring?  

The Senior Manager of Information Security will be a key leader in developing and advancing our information security governance, risk, and compliance (GRC) programs and security delivery programs. The Senior Manager of Information Security will be responsible for security compliance, governance frameworks, risk management, and continuous monitoring to ensure MSG maintains a robust security posture aligned with industry best practices and regulatory requirements.  

Acting as both a GRC SME and a Technical Program Manager, you will establish security policies, manage project portfolios, track key performance indicators, and drive the hands-on delivery of security controls and risk mitigation projects across the enterprise. 

What will you do?   

• Act as the primary Program Manager for enterprise-wide security implementations (e.g., IAM rollouts, zero-trust adoption, vulnerability remediation initiatives). Coordinate dependencies across Engineering, IT, Legal, Privacy, and Studio/Business Ops. 
• Lead the development, documentation, and enforcement of security policies, standards, and control frameworks. (e.g., NIST, CIS, ISO, MPAA Best Practices). 
• Oversee risk assessments, security reviews, and compliance audits to identify gaps and ensure adherence to regulatory requirements, internal standards, and industry best practices. 
• Collaborate with legal, privacy, and business stakeholders to interpret regulatory requirements (e.g., GDPR, CCPA, TPN) and ensure their integration into security and operational processes. 
• Develop and maintain security baselines, control procedures, and governance artifacts to guide Studio technology teams. 
• Oversee vendor risk management by evaluating and continuously monitoring third-party adherence to security standards and requirements. 
• Direct the design and implementation of security compliance monitoring tools and dashboards to track posture and maintain audit readiness. 
• Provide support to the Incident Response team and contribute to post-incident reviews, emphasizing improvements to controls and the implementation of risk mitigation strategies.  
• Serve as a liaison to internal and external auditors, managing evidence collection and audit response processes. 
• Develop and deliver security training and awareness programs. 
• Participate in business continuity and disaster recovery planning to ensure compliance requirements are met. 
• Drive continuous improvement of governance processes and security controls through proactive gap analysis, stakeholder collaboration, and industry benchmarking. 
• Prepare executive-level reports and presentations on compliance status, audit results, risk trends, and governance initiatives. 
• Perform other duties as needed to accomplish the overall Threat Management mission at MSG.
• Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on-site.

What do you need to succeed?   

• 8+ years of related experience 
• Bachelor’s degree, or equivalent combination of education and experience 
• Undergraduate degree in Computer Science, Engineering, or Management Information Systems 
• MS in Cybersecurity preferred 
• 5+ years of experience in Information Security with a focus on governance, risk, and compliance (GRC). 
• Strong knowledge of regulatory requirements (e.g., SOX, PCI, MPAA Best Practice) and industry frameworks (e.g., NIST, ISO, CIS). 
• Experience leading audits and compliance assessments across Cloud environments (AWS, Azure, GCP) and On-Prem systems. 
• Demonstrated experience developing and maintaining security policies, standards, and governance documentation. 
• Strong understanding of risk management principles and methodologies, with experience performing risk assessments and mitigation planning. 
• Familiarity with security technologies and tools (e.g., vulnerability management, identity & access management, endpoint protection), and how they tie into compliance reporting. 
• Experience with compliance and governance platforms is a plus (e.g., ServiceNow GRC, Archer). 
• Excellent communication and collaboration skills 
• Ability to build strong relationships with internal and external stakeholders. 

#LI- Onsite