Director, Infrastructure Security Services

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

Job Description

The Director, Infrastructure Security Services will be a key member of the new Versant Cyber organization. This individual is responsible for protecting the organization’s foundational systems and communication platforms.  This role will define the design, implementation, and management of systems, processes, and teams that protect against cyber threats and ensure the integrity, confidentiality, and availability of critical IT assets. This individual reports directly to the VP, Identity and Security Services and will interact with various key stakeholders within the Cyber organization and drive relationship management across the Versant business areas.  

RESPONSIBILITIES: 

The Director of Security Services will lead the design, delivery, and ongoing enhancement of enterprise-wide security capabilities to protect the applications, data, networks, broadcast platforms, and systems of a leading cable and media company. This leader will be accountable for ensuring the resiliency, availability, and trustworthiness of security services, leveraging advanced tools and modern architectures to safeguard both business-critical infrastructure and customer-facing platforms. 

This role requires expertise across the spectrum of enterprise, cloud, and content delivery environments, as well as the ability to balance business enablement, regulatory compliance, and consumer trust. 

• Define and implement the enterprise security services strategy across cable, broadcast, digital media, and corporate IT environments. 
• Develop multiyear roadmaps for evolving security services to address emerging threats, regulatory requirements, and business growth. 
• Advise executive leadership on risk posture, threat landscape, and prioritization of investments in security technology. 
• Define KPIs and performance metrics for availability, detection coverage, incident response, and compliance. 
• Ensure compliance with industry regulations and frameworks (e.g., FCC, GDPR, SOX, PCI DSS, NIST CSF). 
• Drive operational efficiency while maintaining SLAs and resiliency for mission-critical services. 
• Partner with IT, broadcast operations, and business units to embed security into all stages of service delivery. 
• Foster a culture of collaboration, continuous learning, diversity, and innovation. 
• Lead high-performing teams of engineers and specialists delivering 24x7 security services. 
• Network & Infrastructure Security 
• DNS security & resilience (e.g., Infoblox, Akamai). 
• Network segmentation, micro-segmentation, and Zero Trust models. 
• VPN, ZTNA, and secure access solutions. 
• Application & API Security 
• Web application security & bot management (e.g., Shape Security, Akamai Bot Manager). 
• Secure software development lifecycle (SSDLC) and shift-left testing. 
• API security (e.g., Salt Security, Apigee). 
• Code & dependency scanning (e.g. Veracode). 
• Data Security & Privacy 
• Data Loss Prevention (DLP) tools and policies. 
• Encryption, key, and secrets management (e.g., HashiCorp Vault, HSM). 
• Cloud sec