Cybersecurity Lead (Media & OTT Domain)

SourcingXPress; Bengaluru; On-site; INR 3,000,000 - 4,000,000; Full time

Job summary

A leading technology company in Bengaluru is seeking a Cybersecurity Lead to protect digital assets and ensure regulatory compliance for media and streaming platforms. You will develop cybersecurity strategies and lead a team focused on safeguarding user data against unique threats. The ideal candidate must have extensive experience in cybersecurity, particularly in media or OTT platforms, along with relevant certifications. Join us to make a significant impact in the fast-evolving cybersecurity landscape.

Qualifications

• 5+ years of experience in cybersecurity, preferably in media or OTT.
• Proficiency in DRM, cloud security, and modern authentication protocols.
• Relevant security certifications like CISSP, CISM, or CEH.

Responsibilities

• Develop and implement cybersecurity strategy for media platforms.
• Lead and mentor a team in media systems and OTT security.
• Coordinate with teams to embed secure principles in product lifecycles.

Skills

Cybersecurity management

Incident response

Leadership

Threat modeling

Stakeholder communication

Education

Bachelor’s degree in Computer Science or related field

Master’s or specialist certification

Tools

AWS

Azure

DRM systems

ISO 27001

SOC2

Job description

Company Details

• Company: HCP One
• Website: Visit Website
• Business Type: Enterprise
• Company Type: Service
• Business Model: Others
• Funding Stage: Pre-seed
• Industry: Technology
• Salary Range: ₹ 30-40 Lacs PA

Role Overview

The Cybersecurity Lead for Media & OTT (Over-the-Top) platforms is responsible for safeguarding digital assets, applications, intellectual property, and customer data against cyber threats unique to the media and streaming industry. This role oversees security strategy, manages a team, and ensures regulatory and industry compliance while also responding proactively to fast-evolving threat landscapes, including piracy, credential theft, and large-scale data breaches.

Key Responsibilities

• Develop and implement media- and OTT‑specific cybersecurity strategy to protect content delivery, user data, and operational integrity.
• Lead, mentor, and grow a team of cybersecurity professionals focused on media systems, OTT platforms, CDN networks, and client devices.
• Monitor real‑time security events for OTT services, addressing incidents such as credential stuffing, phishing, account takeovers, piracy, and content leaks.
• Coordinate with IT, legal, DevOps, and business teams to embed secure‑by‑design principles into product development and deployment lifecycles.
• Oversee vulnerability assessments, penetration testing, and forensics targeting streaming infrastructure, user authentication flows, DRM solutions, and video distribution chains.
• Ensure compliance with data privacy and content protection regulations, such as GDPR, DPDP, DMCA, and regional copyright laws.
• Conduct regular risk assessments of OTT apps, digital rights management systems, APIs, and third‑party services.
• Develop and enforce security policies and protocols tailored to media streaming (e.g., content encryption, anti‑piracy watermarking, key management).
• Implement security measures such as MFA, advanced fraud detection, and suspicious activity monitoring for user accounts and transactions.
• Respond promptly to cyber incidents (e.g., data breaches, leaks, DDoS attacks), leading root cause analysis and post‑event reviews.
• Educate employees and end users on security best practices relevant to OTT usage and credential safety.

Required Skills And Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (Master’s or specialist certification preferred).
• 5+ years of experience in cybersecurity with exposure to media, entertainment, or OTT platforms.
• Expertise in content protection (DRM, watermarking), cloud security (AWS, Azure), and modern authentication protocols (OAuth, SSO, MFA, Conditional Access).
• Experience with security frameworks: NIST, ISO 27001, SOC2, CIS Controls, MPA guidelines.
• Demonstrated proficiency in threat modeling, incident response, pen testing, and vulnerability management for media applications & platforms, OTT systems, Broadcasters, MSOs, Media Devices & System on Chip.
• Strong understanding of piracy tactics, credential compromise, DDoS, and regulatory landscape in media and streaming.
• Excellent leadership, stakeholder communication, and crisis management abilities.
• Relevant security certifications (e.g., CISSP, CISM, CEH) and working knowledge of video content delivery mechanisms.

Preferred

• Previous experience securing OTT or large‑scale media streaming platforms.
• Familiarity with consumer protection, broadcast technology, anti‑piracy technologies, and industry standards in DRM and content rights management.
• Experience integrating security into agile/DevSecOps workflows for continuous content delivery pipelines.