Media Security SME

We’re looking for an experienced Cybersecurity Lead to strengthen the security posture of our Media & OTT platforms. This role focuses on safeguarding digital assets, content delivery, and customer data from cyber threats such as piracy, credential theft, and large-scale data breaches. The ideal candidate will lead cybersecurity strategy, mentor a team, and ensure compliance with media industry standards and global data protection regulations.

Key Responsibilities:

• Develop and implement media & OTT-specific cybersecurity strategies to protect user data, content delivery, and operations.
• Lead and mentor a cybersecurity team focused on OTT platforms, CDN networks, and media systems.
• Monitor and respond to security incidents such as credential stuffing, phishing, content leaks, and piracy.
• Collaborate with IT, Legal, DevOps, and Product teams to embed security-by-design principles across the development lifecycle.
• Conduct vulnerability assessments, penetration testing, and forensic analysis of streaming infrastructure and DRM solutions.
• Ensure compliance with GDPR, DPDP, DMCA, and other regional copyright and data privacy regulations.
• Oversee risk assessments for OTT applications, APIs, DRM systems, and third-party integrations.
• Define and enforce media-specific security protocols, including content encryption, anti-piracy watermarking, and key management.
• Implement and manage MFA, fraud detection, and user activity monitoring for enhanced account protection.
• Lead incident response and root cause analysis for cyber events, including DDoS and data breaches.
• Promote security awareness among teams and users for OTT and digital media environments.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s preferred).
• 5+ years of cybersecurity experience with exposure to media, entertainment, or OTT platforms.
• Strong expertise in content protection (DRM, watermarking) and cloud security (AWS, Azure).
• Hands-on experience with authentication protocols – OAuth, SSO, MFA, Conditional Access.
• Knowledge of frameworks like NIST, ISO 27001, SOC2, CIS Controls, and MPA guidelines.
• Experience in threat modeling, pen testing, vulnerability management, and incident response.
• Deep understanding of piracy tactics, credential compromise, and DDoS threats in the streaming domain.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications such as CISSP, CISM, CEH preferred.

Preferred Experience:

• Securing large-scale OTT or broadcast media platforms.
• Familiarity with broadcast technology, anti-piracy systems, and DRM/content rights standards.
• Experience embedding security in Agile / DevSecOps pipelines for continuous content delivery.