Security GRC Program Lead

MSG Entertainment Holdings, LLC; New York (NY); On-site; USD 175,000 - 190,000; Full time

Job summary

MSG Entertainment in New York City is seeking a Senior Manager of Information Security to lead GRC program development, governance, risk management, and compliance across the enterprise.

You will establish security policies, manage project portfolios, and drive delivery of controls; coordinate with Engineering, Legal, Privacy, and Studio/Business Ops; ensure regulatory alignment (SOX, PCI, MPAA best practices) and audits.

Qualifications

• 8+ years of related experience in information security and GRC.
• Bachelor’s degree or equivalent; MS preferred.
• Strong knowledge of regulatory requirements and industry frameworks.
• Experience leading audits and compliance assessments across cloud and on-prem environments.

Responsibilities

• Act as the primary Program Manager for enterprise-wide security implementations across IAM, zero-trust, and remediation.
• Develop, document, and enforce security policies, standards, and control frameworks.
• Oversee risk assessments, security reviews, and compliance audits.
• Collaborate with legal, privacy, and stakeholders to integrate regulatory requirements.
• Develop and maintain governance artifacts to guide technology teams.
• Oversee vendor risk management and third-party security adherence.
• Direct the design and implementation of monitoring tools and dashboards.
• Support Incident Response and participate in post-incident reviews.
• Prepare executive-level reports on compliance status and risk trends.

Skills

IAM rollouts

Zero-trust adoption

Vulnerability remediation

Security policies

Governance & compliance

Regulatory knowledge

Audits & compliance

Vendor risk management

Education

Bachelor's degree or equivalent

MS in Cybersecurity preferred

Tools

Vulnerability management tools

IAM solutions

Endpoint protection

GRC platforms (ServiceNow GRC, Archer)

Job description

MSG Entertainment in New York City is seeking a Senior Manager of Information Security to lead GRC program development, governance, risk management, and compliance across the enterprise.

You will establish security policies, manage project portfolios, and drive delivery of controls; coordinate with Engineering, Legal, Privacy, and Studio/Business Ops; ensure regulatory alignment (SOX, PCI, MPAA best practices) and audits.