- Warner Bros. Discovery
- Shanghai,
- Full-Time
- 4 days ago
Business Information Security Officer: our view in 3 lines...
- The Role: Lead the information security function for the Warner Bros. Studio Tour Shanghai joint venture, managing cyber risk, vendor security and alignment with global security programs.
- The Person: Own the MSSP engagement and service delivery, lead security projects, KRI reporting, incident support, policy enforcement and harmonization with centralized cybersecurity functions.
- Requirements: Experience with PRC Cybersecurity Law, Data Security Law, PIPL, MLPS 2.0, ISO/IEC 27001 or NIST alignment, OWASP top 10, SIEM and logging tools, vulnerability management and EDR/XDR toolsets is required.
Job Description
Welcome to Warner Bros. Discovery… the stuff dreams are made of.
Who We Are…
When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…
From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.
Warner Bros. Discovery is a global media company and operates some of the best-known entertainment, news, and sports brands in the world. We bring people, technology, and the world's best storytellers together to drive culture and meaningful connection. We believe the enduring power of stories can open our eyes to the world, to each other, and to new and different perspectives.
Our Global Experiences division brings that creative storytelling vision to life with compelling and immersive in-person experiences. The phenomenally successful Warner Bros. Studio Tours in London, Hollywood, and Tokyo, flagship retail stores in New York and Chicago, magical Harry Potter experiences at Universal Studios Parks and Resorts worldwide, Warner Bros. World Abu Dhabi, along with the popular Friends Experiences and more, deliver high levels of fan engagement, exceptional customer service, and creative interactivity.
The next exciting addition to this collection is Warner Bros. Studio Tour Shanghai - The Making of Harry Potter, a completely new experience for Harry Potter fans in China. Located in the heart of Shanghai, this indoor attraction will transport visitors into the world of filmmaking, revealing production secrets through interactive experiences, showcasing stunning locations, and displaying beautifully crafted props.
Warner Bros. Studio Tour Shanghai will be operated in partnership with Jinjiang International (Holdings) Co., Ltd, a State-Owned Enterprise, ensuring a world-class experience for all who visit.
Job Title: Business Information Security Officer
From the phenomenally successful Warner Bros. Studio Tours in London, Hollywood, and Tokyo, to flagship retail stores in New York, Chicago and Tokyo, the next exciting addition to this collection is Warner Bros. Studio Tour Shanghai - The Making of Harry Potter, a completely new experience for Harry Potter fans in China.
Located in the heart of the city, Warner Bros. Studio Tour Shanghai – The Making of Harry Potter is an indoor attraction designed to transport visitors into the world of filmmaking, revealing production secrets through interactive experiences, showcasing stunning sets, and displaying beautifully crafted props.
This new attraction will deliver the Studio Tour values of exceptional customer service, experiences that exceed visitors’ expectations and the very best in Harry Potter retail.
Warner Bros. Studio Tour Shanghai will be operated in partnership with Jinjiang International (Holdings) Co., Ltd, a State-Owned Enterprise, ensuring a world-class experience for all who visit.
Your New Role – Business Information Security Officer
Duration of role – Full Time Employee
Role Reports To – General Manager
Your Role Accountabilities
- Own and manage the MSSP engagement for Cyber Security, including contract governance, vendor relationship management, and service performance over sight. Act as the primary Service Delivery Manager (SDM) and single point of contact, ensuring effective delivery against agreed SLAs, KPIs, and security outcomes.
- Provide direction and supervision on security-related projects and initiatives, ensuring compliance with security standards and best practices.
- Evaluate and recommend security solutions and tools that enhance the security posture and capabilities of the Studio Tour.
- Lead the identification of key risk indictors (KRI’s) for WB Studio Tour Shanghai operations; driving the analytics, metrics gathering and reporting of KRI’s to the General Manager, Audit Committee, Board of Directors and WBD leadership (as required).
- Promoting a culture of security awareness and accountability with the Studio Tour Leadership Team.
- Handle security exceptions for Studio Tour and Retail operations, ensuring proper documentation, approval, and review processes are followed.
- Lead the adoption and enforcement of Company policies, processes and standards across the business.
- Support enterprise and business lines regulatory and compliance requirements and develop implementation strategies that minimize operational impact and disruption.
- Support security operations and other teams in the identification, investigation, and mitigation of cyber security incidents.
- Partner with other WBD Leadership to enable adoption of the Global Information Security program as required across JV operations through harmonization of global security capabilities with JV-specific processes, risk profile, and regulatory context.
- Foster a strong security culture and technical security measures within the Studio Tour.
- Act as a link between Warner Bros. Studio Tour Shanghai and our centralized cybersecurity functions, ensuring that security initiatives are aligned with business goals and priorities.
Qualifications/Experience
- Bachelor’s degree in computer science, Engineering, or other related discipline preferred or 10+ years of previous technical security experience, e.g.,
- 10+ years of supervisory or management experience in a technical security environment.
- Demonstrable experience of working within an international team and a multinational company.
- Experience in leading projects leveraging global teams with matrix resources.
- Extensive experience in the information security field designing and implementing enterprise security solutions in a global context.
- Work experience in the Entertainment & Media industry desired but not essential
Skills/Knowledge Required
The Essentials
- Executive presence, technical security expertise, business acumen, communication skills and alignment focus.
- Solid knowledge of PRC information security and data protection regulations and standards, including the Cybersecurity Law (CSL), Data Security Law (DSL), Personal Information Protection Law (PIPL), and Multi-Level Protection Scheme (MLPS 2.0), as well as alignment with international information security control frameworks (e.g., ISO/IEC 27001, NIST, PCI, SOX).
- Strong understanding of audit/risk management methodologies and regulatory requirements pertaining to information security, privacy and/or data security
- Hands-on experience with security pracBces such as security incident response and risk management.
- Exceptional verbal and written communication skills, specifically the ability to communicate within the context of the intended audience, whether that be senior executives or highly technical engineering resources.
- Good understanding of Industry trends and emerging threats.
- Fluent in business English and Mandarin
Should possess proficiency in the technical aspects of cyber security, such as:
- Cloud infrastructure and concepts, specifically the security aspects thereof
- Application security topics such as the OWASP top 10.
- SIEM & logging tools
- Vulnerability Management and EDR/XDR toolsets.
- Network and Compute architectures
- Identity & Access Management and Privileged Access Management
The Nice to Haves
• Experience in providing cybersecurity services and operating model design for companies, focused on Theme Parks and large-scale Visitor Attraction environments in a multi-national working environment
• Security certifications are a plus (CISSP, CISM, CISA, SANS, etc.)
Shanghai Joint Venture Employment:
Please note that this position is employed through Warner Bros. Discovery’s joint venture with Jin Jiang International (Holdings) Co., Ltd. The joint venture entity is Shanghai WB Jinjiang Studio Tour Co., Ltd. Successful candidates will be hired by the joint venture company and assigned to work with Warner Bros. Discovery as required for this project.
How We Get Things Done…
This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with some insights from the team on what they mean and how they show up in their day to day. We hope they resonate with you and look forward to discussing them during your interview.
Championing Inclusion at WBD
Warner Bros. Discovery embraces the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, regardless of sex, gender identity, ethnicity, age, sexual orientation, religion or belief, marital status, pregnancy, parenthood, disability or any other category protected by law.
If you’re a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.
