Senior Program Analyst, Information Security

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY 

Sony Corporation of America (SCA) is seeking a Senior Program Analyst, Information Security to join the Information Security Department located in New York City. This position will report to the Senior Manager, Information Security, and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s information security program. SCA’s information security program scope includes certain SCA subsidiary companies such as Sony Music Publishing (SMP), Sony DADC (Digital Audio Disc Corporation), Sony AI and Sony Biotechnology (the “SCA-Responsible Entities”). 

What is the opportunity?  

If you have been in information security for 4 to 5 years and you want to expand your horizon to more than one or two scopes of infosec, this role is for you. This position is an opportunity to bring your expertise to support the program and then grow from there to learn across the domains of information security: risk management, vulnerability management, incident management and Training & Awareness. The breath of businesses the SCA information Security team support will expose you to multiple and sometime complex business projects that will help you develop your critical thinking and strong project management skills. If you are passionate about cyber security and want to take the next step in your career this is a great opportunity 

JOB RESPONSIBILITIES 

• Monitoring our vulnerability management platforms and dashboards (Qualys, Splunk), escalate to the necessary teams in a timely manner.  

• Help the development teams prioritize security tasks in their Agile processes. 

• Validate, triage, and respond to incidents identified by all sources including the Global Security Incident Response Team (GSIRT) 

• Gather and report on program metrics with regards to incident management 

• Conduct information security assessments and develop and execute risk mitigation plans. 

• Provide guidance to stakeholders with regards to security controls and best practices. 

• Conduct architecture review when necessary (cloud and on-premises environments) 

• Foster close working relationships with key stakeholders across the scope to enable support for security initiatives. 

• Demonstrate strong project management skills to improve the program. 

QUALIFICATIONS FOR POSITION 

Your qualifications and experience should include:  

• Minimum of 4 years of related work experience in information security. 

• Prefer a minimum of two (2) years related work experience in Consulting. 

• Preferred: Professional in Project Management (PMP), ITIL certification and/or project management experience 

• Requires a bachelor’s degree in a related field (such as information technology or management) or equivalent in education and experience.  

• Combined experience in IT external audit, IT internal audit and technology risk and/or IT General control assessment for compliance  

• Strong analytical and research skills with a keen attention to detail 

• Detail oriented and capable of delivering a high-level of accuracy 

• Team player capable of working in multiple environments.  

• Experienced in adapting to a dynamic work environment and prioritizing tasks accordingly. 

• Demonstrates strong work ethic and business acumen.  

• Independent, self-starter with the ability to continuously grow through challenges. 

• All candidates must be authorized to work in the USA. 

In addition to competitive pay and benefits, we offer an environment and culture that promotes Diversity, Equity, and Inclusion. We are committed to creating an inclusive employee experience for you to thrive as part of Sony’s purpose to “fill the world with emotion through the power of creativity and technology”. 

Benefits:    

SCA offers benefits-eligible employees (generally regular employees scheduled to work 20 or more hours a week) a comprehensive benefits program that offers coverage a