VP of Security and Risk Management (W/M/NB)

<h3>Company Description</h3><p><strong>Company Description</strong></p><p>Ubisoft’s 20,000 team members, working across more than 30 countries around the world, are bound by a common mission to enrich players’ lives with original and memorable gaming experiences. Their dedication and talent have brought to life many acclaimed franchises such as Assassin’s Creed, Far Cry, Watch Dogs, Just Dance, Rainbow Six, and many more to come. Ubisoft is an equal opportunity employer that believes diverse backgrounds and perspectives are key to creating worlds where both players and teams can thrive and express themselves. If you are excited about solving game-changing challenges, cutting edge technologies and pushing the boundaries of entertainment, we invite you to join our journey and help us create the unknown.</p><ul><li><strong>Location</strong>: East Coast NCSA or Europe</li><li><strong>Duration of work</strong>: Full-time</li><li><strong>Remote or on-site</strong>: Flexible Working Organization: To be discussed</li><li><strong>Language</strong>: English required, French and other languages a bonus </li></ul><h3>Job Description</h3><p>The Vice President of Security and Risk Management is a senior business executive function responsible for leading the security and risk management function across a large game development organization, managing multiple diverse stakeholders. The individual will develop and implement a comprehensive security and risk management strategy and lead the development and maintenance of enterprise security architecture and solutions architecture. </p><p>Key responsibilities include overseeing security systems and infrastructure, driving incident response with their teams, staying current on security trends, working with senior leadership, promoting security awareness, demonstrating strong leadership when required, interfacing with management, building external networks, managing and developing a large security team, and using their network to unblock security teams when needed. </p><p>It's important to note that while the role is primarily a business executive function, experience with the hands-on technical aspects of security is helpful to ensure a connection with the technical staff and an understanding of the reality on the ground. This will help the VP to make informed decisions and provide effective guidance to the technical team. </p><p>The individual should have a minimum of 10 years of experience in security and risk management, with at least 5 years in a leadership role, strong understanding of security and risk management best practices, experience with incident response and investigations, and expertise in crisis management with practical experience in mobilizing teams to respond to major incidents and problems with unknown solutions. </p><p>A well-rounded individual with good chemistry with the executive team, with strong leadership, communication, relationship and stakeholder management skills are essential for success in this role. </p><p>The role reports to the CIO. </p><p><strong>Key Responsibilities</strong>: </p><ul><li>Demonstrate strong leadership skills and ability to communicate effectively with staff at all levels </li><li>Develop and implement a comprehensive security and risk management strategy </li><li>Oversee the implementation and maintenance of security systems and infrastructure </li><li>Drive incident response and lead investigations into security breaches or potential threats </li><li>Stay current on security and risk management trends and regulations and ensure compliance </li><li>Work with the senior leadership team to identify and manage potential risks to the organization </li><li>Drive the implementation of DevSecOps and security operations processes </li><li>Drive the Ethical Hacking team in revealing security gaps before they're exploited </li><li>Oversee the Security Operations Center (SOC) and Vulnerability Management </li><li>Ensure the collection and analysis of Threat Intelligence on potential threats </li><li>Promote security awareness and education across the organization </li><li>Interface with management and handle sensitive messaging and politics, manage the budget </li><li>Build and maintain external networks and relationships with key members of the security industry </li><li>Protect the security teams from overwork and burnout </li></ul><h3>Qualifications</h3><p><strong>Experience and Characteristics</strong>: </p><ul><li>Strong understanding of security and risk management best practices and regulations </li><li>Minimum of 10 years of experience in security and risk management </li><li>At least 5 years in a leadership role </li><li>A track record of success recognized by others in previous efforts </li><li>A skillful ability to coach and increase the leadership caliber of the middle managers </li><li>Familiarity of the gaming industry and its unique challenges is a major plus </li><li>The ability to influence to win/win outcomes in the