Netflix is one of the world's leading entertainment services, with over 300 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time.

Team Overview

The Business Security Partner (BSP) team delivers a balanced approach to securing our business based on the business context provided by our stakeholders. The Business Security Partner team sits within the Security, Privacy and Assurance team at Netflix. We ensure that Netflix can pragmatically address top security risks while maintaining business agility, velocity and scale.  

We're looking for our next Security Partner to lead security conversations between the Security team and our business units. The BSP team manages the picture of risk in their stakeholders' ecosystem, secures business workflows and technical ecosystems, and delivers targeted awareness. Things move fast at Netflix, and this team is essential to ensuring strong alignment that addresses critical risks.

The Role

We are seeking an experienced security professional with broad security domain knowledge and expertise, who is comfortable working in environments subject to change and that operate at high velocity. This role will be a crucial security point of contact for the Netflix technical leadership and business stakeholders. You will be building relationships with key business units to develop a deep understanding of the line of business, their key business objectives, and drive informed security context into their teams. Once onboard, one of the first business units you will be responsible for supporting is Legal. This role will also provide guidance back to our Security teams to develop solutions that would align well with the business. You will be a champion of identifying and mitigating or right-sizing risk within their line of business through sound security principles and guidance. You like the idea of traveling internationally and experiencing other cultures. 

Netflix has a unique and innovative culture that guides us to do things differently. This helps keep velocity high and means that our security team needs to operate differently from a traditional security team. At Netflix, we put “People over Process” - We hire unusually responsible people who thrive on this openness and freedom. Instead of controlling our stakeholders with process and security gates, we enable them to securely create great content by providing security context to make the right decisions for Netflix.

Key Responsibilities

• Cultivate and maintain strong relationships with business stakeholders

• Provide direction on security and risk strategy to the business; the BSP is a key strategic advisor for the business

• Serve as the main liaison between the business and corresponding security teams to ensure that business initiatives are done in accordance with security standards

• Evaluate risks within the business, advise the business on prioritization, and recommend remediation

• Develop metrics and reporting to communicate business initiatives, risks, etc. to the broader security organization

• Serve as the subject matter expert for the business unit on security, privacy, risk, and compliance

• Advise and perform third-party risk management services for the business in partnership with other security teams

Candidate’s Strengths 

To be successful in this role, you'll need to have the following skills:

• Easily partner and forge relationships with cross-functional teams and stakeholders

• Are a thoughtful and responsible security professional - someone who is self-motivated and can proactively seek input

• Excellent written and verbal communication and delivery of insights to a diverse audience

• Care deeply about creating a team that models psychological safety and inclusivity, where team members can do their best work

• Are selfless when it comes to getting the work done and leaning on experts

• You have breadth across multiple security domains and depth in a few

• You have built and grown security services and programs in your previous experience, and understand how to measure the impact and risk

• You are self-motivated and can deal well with ambiguity