Senior Director, Defect Management

Job Summary:

WHO ARE WE?

Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide.  Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40+ countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year. For additional information, visit www.livenationentertainment.com.

WHO ARE YOU?

Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on! 

THE ROLE

We are seeking a highly motivated and detail-oriented Senior Director to Lead our Defect Management Team specializing in Penetration Testing, Vulnerability Management and resolution of defects, to join our cybersecurity team.

Reporting to the Vice President, Governance, Risk and Compliance (GRC), you will play a crucial role in identifying, evaluating, and mitigating security risks associated with vulnerabilities and defects throughout the LNE organization. You will lead a team of multidisciplinary professionals and work closely with cross-functional teams across geographical regions to ensure that vulnerabilities are effectively prioritized, remediated, and monitored, thereby protecting the organization’s assets and sensitive data.  As a part of this role, the candidate will be required to clearly and effectively communicate the business impact and urgency of security defects, while closely following the defined risk management process.

This position is also responsible for defining the expected outcomes of and reporting metrics for Defect Management across the Live Nation Entertainment enterprise, ensuring high quality configuration and defect remediation.

WHAT THIS ROLE WILL DO

• Develop, lead, and manage a high-performing security team of multiple skill sets across multiple locations
• Enhance the Defect Management Framework, ensuring Compliance, Regulatory, and best practices is at its core
• Cultivate the strategic direction, training, and evolution of the team to remain highly effective at various aspects of Cyber Security engagement
• Proactively research and communicate emerging security threats through technical knowledge of the environments we operate in
• Conduct hands-on technical security awareness training for software architects and development groups.
• Foster effective teamwork, communication, collaboration, and commitment across multiple disparate groups with competing priorities
• Empower the team, lead by example, and mentor all levels of competency
• Champion improvements to internal programs and processes
• Engage in threat modelling, security design reviews, infrastructure penetration testing, and security issue remediation verification
• Work with application teams’ enterprise-wide to detect, prioritize, and remediate security defects throughout the SDLC process. The goal is to inject a security mindset throughout the full SDLC from concept to testing and implementation.

WHAT THIS PERSON WILL BRING

• 10+ years of experience working in a technical security position, penetration testing, information security hardening technologies and techniques or similar background
• 5+ years of experience in Cyber Security related domains, with knowledge of security fundamentals, application vulnerabilities, attack vectors, penetration testing methodologies, and tools
• 5+ years of experience driving Information Security initiatives across large diverse organizations
• 5+ years of experience communicating with a wide range of technical & non-technical partners and senior leadership
• Proficiency working with recognized IT Security-related standards and technologies
• Training in Information Security-specific disciplines
• Advanced written and verbal communication skills
• Knowledge of information security standards, rules, and regulations related to information security and data confidentiality, and desktop, server, application, database, and network security principles for risk identification and analysis
• Experience with performing all elements of penetration testing and