Director, Infrastructure Security Services

Summary

Join NBCUniversal's Enterprise Cyber Services team as a leader in infrastructure security. You will lead a team of engineers and architects, defining and executing the infrastructure security services strategy. This role requires deep technical expertise in enterprise infrastructure security and proven experience in designing, delivering, and managing large-scale infrastructure services. You will collaborate with various teams and stakeholders to ensure alignment with enterprise security and business goals. The position offers a competitive salary, comprehensive benefits, and opportunities for professional growth. This is a crucial role in shaping NBCUniversal's security posture and driving innovation.

Requirements

• 10+ years of experience in IT or cybersecurity, including 5+ years in a leadership role
• Deep technical expertise in enterprise infrastructure security with an understanding of how network strategy, WAF, endpoint security, email security, and DNS management come together to provide a comprehensive security stack
• Experience in vendor management and technical solution selection processes
• Proven track record of designing, delivering, and managing large-scale infrastructure services with a focus on security
• Expert-level experience in enterprise network design, segmentation, routing, and firewall strategy
• Strong communication abilities, a desire to build consensus, and a comfort relaying technical and security principles and decisions to a wide range of audiences
• Experience designing and operating security tools and services at enterprise-scale
• Comfort engaging in deeply technical efforts while keeping a strategic view and staying focused on key goals
• An understanding of security risk and a willingness to make risk-based decisions balancing the urgent and the important
• A thirst for improvement and an inclination to thoughtfully challenge the status quo
• Desire to try things and iterate on them, fail fast, and focus on features that matter
• Bachelor's degree in a relevant field or equivalent work experience

Responsibilities

• Lead a team of product-oriented security engineers and architects, each delivering a portion of the overall security product portfolio and working together with other product and engineering teams to form a cohesive story
• Define and execute the infrastructure security services strategy, ensuring alignment with enterprise security and business goals
• Serve as a trusted advisor and subject-matter expert in infrastructure security services
• Lead the development of a multi-year service roadmap focusing on innovation, scalability, and operational excellence
• Collaborate with senior leadership to establish priorities, report on progress, and address emerging security challenges
• Oversee cradle-to-grave service design and delivery for all infrastructure security services
• Ensure services are built, deployed, and maintained following enterprise security standards and best practices
• Establish and track service-level agreements (SLAs), operational metrics, and key performance indicators (KPIs)
• Collaborate with enterprise architects, application teams, and business leaders to integrate security services into enterprise initiatives
• Partner with the broader security organization to align policies and requirements
• Partner with Enterprise Engineering and business partners to ensure delivery plans are approachable and seen as business enablers
• Foster a culture of innovation, accountability, and continuous learning
• Drive talent development through performance management, coaching, and career growth planning

Preferred Qualifications

• Familiarity with infrastructure threats, intrusions, and breaches that leverage exploits in network perimeters and how to avoid, mitigate, and defend against them
• Knowledge or experience in the media and entertainments space, and awareness of the technical landscape involved in content creation and delivery
• Experience with threat intelligence, ATT&CK framework, Cyber Kill Chain, or the Pyramid of Pain, and how they fit into developing internal security strategy
• Exposure to security compliance requirements/frameworks such as ISO27001, PCI/DSS, NIST 800-53, etc

Benefits

• Medical, dental and vision insurance
• 401(k)
• Paid leave
• Tuition reimbursement
• A variety of other discounts and perks
• Salary range: $180,000 - $210,000 (bonus and long-term incentive eligible)