Information & Product Security Specialist, DX Office

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

DEPARTMENT OVERVIEW 

The Corporate Digital Transformation (DX) team goal is to enable the transformation of Sony, and its component companies into data-driven and AI-driven companies enabled by innovative technology. Information sharing within and across Sony operating companies is critical to these transformations, and success in doing so requires innovation and precision in approaches to information security. In order to encourage and accelerate these transformations, the DX team is also building and operating information systems that enable sophisticated data analysis and cross-company sharing of some of the most sensitive information that Sony handles. These DX systems include complex, state-of-the-art data transformation and analytics platforms, and include high performance, customer-facing services that will be incorporated into products and services of multiple Sony companies. 

Strong, consistent, innovative information security approaches are necessary both within the DX systems, and in the various operating company systems that incorporate the DX services, and that share, analyze, and consume information in the emerging data-driven Sony. 

POSITION SUMMARY 

The Specialist, DX Information and Product Security plays an important role in ensuring seamless coordination and planning of activities inside the Information and Product Security department and with partner departments as well, particularly the DX Program Management Office (PMO). This position will support and facilitate DX activities by developing processes, managing project operations, and coordinating the delivery of information and product security work. The Specialist will act as a liaison between different teams, facilitating effective communication, and ensuring successful execution of various security-related tasks. Additionally, the role will assist in risk assessments, vendor outreach, and reporting on the status of vulnerability and risk remediation efforts. 

In addition to the core responsibilities mentioned earlier, the Specialist will also play a crucial role in defining and improving processes and workflows within the Information and Product Security department. This includes developing and documenting security-related procedures, creating standardized templates for reports and documentation, and identifying areas for process optimization and efficiency gains. The Specialist will collaborate with various stakeholders to gather input, conduct process assessments, and propose enhancements to ensure a streamlined and effective security operation. 

The incumbent will work closely with the Vice President of DX Information and Product Security, the team of security engineers, and other stakeholders throughout the DX and wider Sony organization, fostering a collaborative environment to deliver information security objectives effectively. The role requires strong organizational and communication skills, as well as the ability to work across multiple stakeholders and teams to drive continuous process improvement. 

We want to invite those who have the experience and knowledge to join the team responsible for all aspects of product security and cybersecurity of the DX products and projects, which enables SONY to be a better data-driven company. 

JOB RESPONSIBILITIES 

1. Planning, Timelines and Deliverables Tracking: 

• Monitor project timelines and milestones for information and product security work. 

• Collaborate with security engineers and stakeholders to ensure timely completion of deliverables. 

• Report on progress and potential delays to the management team, including preparation of monthly status reports for leadership. 

2. Risk Assessment Coordination: 

• Assist in coordinating risk assessments for DX projects and initiatives. 

• Collaborate with internal and external stakeholders to gather relevant information. 

• Support vendor outreach and communication related to security assessments. 

3. Vulnerability and Risk Remediation Reporting: 

• Prepare regular reports on the status of vulnerability assessments an