Want to know if this job is worth applying to?
Nashville, Tennessee, United States
Onsite
Who We Are
Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Distinguished by its culture of collaboration and exceptional client service, CAA’s diverse workforce identifies, innovates, and amplifies opportunities for the people and organizations that shape culture and inspire the world. The trailblazer of the agency business, CAA was the first to build a sports business, create an investment bank, launch a venture fund, found technology start-up companies, establish a philanthropic arm, build a business in China, and form a brand marketing services division, among other innovations. Named Most Valuable Sports Agency by Forbes for eight consecutive years, CAA represents more than 2,000 of the world’s top athletes in football, baseball, basketball, hockey, soccer, in addition to coaches, on-air broadcasters, and sports personalities and works in the areas of broadcast rights, corporate marketing initiatives, social impact, and sports properties for sales and sponsorship opportunities. Founded in 1975, CAA is headquartered in Los Angeles, and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally.
The Role
Reporting to the CAA Deputy CISO this is a hands-on solutions architect role with a focus on cyber/information security, working within the Information Risk Management (IRM) group and delivering secure technology solutions to the company at large. The role is critical in embedding security into CAA technology solutions that are developed in-house or SaaS based. The candidate will collaborate across business, technology, and other functional business areas to understand requirements and workflows to develop and guide implementation of secure solutions to protect CAA assets.
We are looking for candidates who are self-driven and proficient in cybersecurity, third-party risk/security management, data security and general IT risk management processes. The candidate will have experience as a solutions architect with a strong focus on integrating security through the product/solution lifecycle.
The candidate will play a key role in our teams’ efforts to build and support a defensible environment where we are able to detect, contain and respond quickly to data security threats and compromise in ways that serve to enable the business needs of a highly collaborative organization. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practices.
Responsibilities
Lead the solutions architecture function to ensure security is integrated early in the development lifecycle for in-house applications or SaaS based solutions, infrastructure projects and technology processes.
Partner with business and technology teams to identify and document workflows, system architecture, data flows and develop appropriate security considerations.
Leverage Threat Modeling techniques to identify security threats, vulnerabilities, and attack vectors across the solution (infrastructure, application, data).
Ensure the security considerations identified are implemented and the solutions are configured securely.
Develop secure patterns for foundational technology solutions based on CAA security standards and continually educate technology stakeholders on the adoption of patterns.
Key focus on security integrations includes secure access and authorizations, audit logging, secrets management, data protection, data security and other functional third-party integrations.
Support the SaaS/Third Party security assessments and collaborate with service owners, business leads and vendors to develop a managed solution aligned with CAA security policies.
Identify risks and provide mitigating controls or risk treatment options for a given solution.
Develop training for technology team members to increase awareness on security practices for onboarding new technology solutions.
Required Capabilities
Minimum 8 years of Information Security experience with a Bachelor’s Degree.
Minimum 3 years experience in a Security Architecture function.
Create and review system architecture diagrams in Lucidchart or equivalent tool.
Experience in SaaS and Cloud architectures – Azure, AWS, M365, and exposure to SAP 4/HANA, Workday, Salesforce, and other SaaS solutions. Cloud architecture certifications preferred.
Experience with Cybersecurity frameworks – NIST CSF, CSA Cloud Controls.
Cybersecurity certifications CISM, CISSP or equivalent work background preferred.
Familiarity with operational tools such as JIRA, ServiceNow, OneTrust.
Experience with contractual and regulatory standards such as GDPR, CCPA, FINRA, TISAX, SOX.
Experience with third party security assessments and standards – SOC, ISO27001, SIG.
Ability to communicate complex messages in a clear and concise manner with stakeholders at all levels.
Excellent organizational skills and ability to communicate with internal/external entities and executives.
Effective leadership skills with demonstrated ability to coordinate people and teams to project/activity completion.
Ability to work in team environment sharing responsibilities.
Ability to work in a flexible environment where requirements and procedures continuously evolve.
Location
This role is based in our Nashville office.
Compensation
The annual base salary for this position is in the range of $188,000- $220,000 in Nashville. This position is also eligible for benefits and a discretionary bonus. Ultimately, the salary may vary based upon, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria. Please talk with a CAA Recruiter to learn more.