Senior Director, Cyber Defense at iHeartMedia, Inc

iHeartMedia

Current employees and contingent workers click 

to apply and search by the Job Posting Title.

The audio revolution is here – and iHeart is leading it!  iHeartMedia, the number one audio company in America, reaches 90% of Americans every month -- a monthly audience that’s twice the size of any other audio company – almost three times the size of the largest TV network – and almost 4 times the size of the largest ad-supported music streaming service.  In fact, we have:

• More #1 rated markets than the next two largest radio companies combined;

• We’re the largest podcast publisher, with more monthly downloads than the second- and third-largest podcast publishers combined. Podcasting, the fastest-growing new media, today has more monthly users than streaming music services or Netflix;

• iHeart is the home of many of the country’s most popular and trusted on-air personalities and podcast influencers, who build important connections with hundreds of communities across America;

• We create and produce some of the most popular and well-known branded live music events in America, including the iHeartRadio Music Festival, the iHeartRadio Music Awards, the iHeartCountry Festival, iHeartRadio Fiesta Latina and the iHeartRadio Jingle Ball Tour;

• iHeartRadio is the #1 streaming radio digital service in America;

• Our social media footprint is 7 times larger than the next largest audio service; and

• We have the only complete audio ad technology stack in the industry for all forms of audio, from on demand to broadcast radio, digital streaming radio and podcasting, which bring data, targeting and attribution to all forms of audio at an unparalleled scale.  As a result, we’re able to combine our strong leadership position in audience reach, usage and ad tech with powerful tools and insights for our sales organizations to help them build success for their clients at a more efficient cost than any other option. 

Because we reach almost every community in America, we’re committed to providing a range of programming that reflects the diversity of the many communities we serve – and our company reflects that same kind of diversity.  Our company values stress collaboration, curiosity, welcoming dissent, accepting mistakes in the pursuit of new ideas, and respect for everyone.

Only one company in America has the #1 position in everything audio: iHeartMedia!

If you’re excited about this role but don’t feel your experience aligns perfectly with the job description, we encourage you to apply anyway.  At iHeartMedia we are dedicated to building a diverse, inclusive, and authentic workplace and are looking for teammates passionate about what we do!

What We Need:

A Cyber Defense Leader with broad experience implementing cybersecurity defensive strategies and techniques across cloud platforms, on/off prem systems with proven expertise in defensive planning, securing and protecting systems, designing defensive enterprise security architectures, and maximizing the use of security tools and technologies to defend the company against threats.

What You'll Do:

Form a Cyber Defense Execution team to defend against cyber-attacks and conduct holistic root cause analysis and investigations.
•    Assist CISO with launching a comprehensive information and cyber security program.
•    Design defensive cyber security strategies to protect the enterprise.
•    Establish security policies and standards for on and off prem, network, apps, and cloud infrastructures. 
•    Mature and enhance current state security and risk posture.
•    Institute a threat modeling process.
•    Partner with BISO and business partners to implement product security standards and assessments and reduce business line risks.
•    Keep abreast of emerging technologies, threats, and risks to mitigate impact to the company.

•    Stay abreast of the evolving threat and regulatory landscape.
•    Partner with CISO to establish risk mitigation strategies through technology and processes.
•    Partner with enterprise IT teams to solve for proactive mitigation solutions to issues, vulnerabilities, and remediation efforts.
•    Ensure security strategy execution and a layered defense approach to protecting the enterprise. 
•    Collaborate with leaders responsible for protecting the company to ensure alignment on risk mitigation strategies.
•    Partner with technical and business teams to identify risk areas and implement protective controls to defend the company systems and data against adversaries and threats.
•    Support the GRC team by understanding laws, regulations, requirements, and the extended threat landscape and taking necessary precautions to protect the company from third party risks.
•    Align with the PMO team to ensure appropriate gates in the project management process to ensure continuous oversight of changes to the security and risk posture.
•    Assist CISO in maximizing and optimizing current state security tools and technology.
•    Provide hands on assistance and expertise to the SOC and T/VM teams to ensure threat intel, vulnerability self-assessments, and log data are used proactively to protect the company and build appropriate defenses.  

•   Partner with Business and IT teams to ensure appropriate protection capabilities are implemented as part of security by design.

What You'll Need:

Bachelor’s degree
•    10+ years’ experience in information and cyber security
•    Strong understanding of detection, protection, prevention technologies such as MDR/EDR, IDS/IPS, SIEM, SOAR, VM, and cloud security technologies, etc.
•    In depth knowledge of major technologies, platforms, systems, such as AWS, GCP, Microsoft Azure, Microsoft 365 E5, etc.
•    Strong problem solving skills, root cause analysis, and information assurance proficiency.
•    Hands on technical expertise with deep knowledge of industry best practices in various aspects of information and cyber security.
•    Knowledge of industry standard frameworks – NIST CSF, NIST 800-37/53, FISMA, DISA, etc., PCI, ISO, etc.
•    Experience with Unix/AIX/Linux Systems/VMware/Citrix/AWS/Azure experience

What You'll Bring:

Location:

VIRTUAL, NC

Position Type:                                                                                             

Regular

Time Type:

Full time

Pay Type:

Salaried

Benefits:

iHeartMedia’s benefits offering is flexible and offers a variety of choices to meet the diverse needs of our changing workforce, including the following:

• Employer sponsored medical, dental and vision with a variety of coverage options

• Company provided and supplemental life insurance

• Paid vacation and sick time

• Paid company holidays, including a floating holiday that enable our employees to celebrate the holiday of their choosing

• A Spirit day to encourage and allow our employees to more easily volunteer in their community

• A 401K plan

• Employee Assistance Program (EAP) at no cost – services include telephonic counseling sessions, consultation on legal and financial matters, emotional well-being, family and caregiving

• ​A range of additional voluntary programs, such as spending accounts, student loan refinancing, accident insurance and more!

We are accepting applications for this role on an ongoing basis.

The Company is an equal opportunity employer and will not tolerate discrimination in employment on the basis of race, color, age, sex, sexual orientation, gender identity or expression, religion, disability, ethnicity, national origin, marital status, protected veteran status, genetic information, or any other legally protected classification or status.

Non-Compete will be required for certain positions and as allowed by law.

Our organization participates in E-Verify.  Click

to learn about E-Verify.