Senior GRC Leader — Security, Compliance & Automation

Sony Pictures Entertainment, Inc; Culver City (CA); On-site; USD 130,000 - 170,000; Full time

Job summary

Sony Pictures Entertainment, Inc. is seeking a senior GRC leader to build and scale enterprise governance, risk, and compliance programs across its affiliates.

You will drive PCI DSS, ISO 27001, privacy controls, and security governance frameworks while aligning with Sony Group initiatives. You’ll partner with IT, Legal, Privacy, P&O, and Production Security to automate control assessments and report on risk posture.

Qualifications

• 5–7+ years in cybersecurity GRC, compliance, risk management, audit, or security program management.
• Hands‑on with PCI DSS, ISO 27001, SOC 2, NIST CSF.
• Experience leading compliance assessments, remediation management, and control validation.
• Experience developing and operationalizing security policies, standards, and governance processes.
• Familiarity with GRC/workflow platforms (ServiceNow, AuditBoard/Optro, Smartsheet).
• Experience driving automation in compliance operations, evidence collection, reporting, or monitoring.
• Familiarity with AI‑enabled workflows to improve scalability.
• Strong communication and stakeholder management skills.
• Experience in entertainment/media/gaming/streaming environments is desirable.
• Certifications preferred (CISA, CISM, CRISC, CISSP, ISO 27001, PCI ISA).

Responsibilities

• Lead enterprise cybersecurity compliance programs including PCI DSS, ISO 27001, and privacy initiatives.
• Coordinate end‑to‑end assessments: scoping, evidence collection, testing, remediation tracking, reporting.
• Partner with control owners to assess effectiveness and drive remediation.
• Develop dashboards and executive reporting on compliance status and risk trends.
• Identify opportunities to automate control assessments and governance workflows.
• Support continuous control monitoring and process improvements for efficiency.
• Develop and modernize global information security policies and procedures.
• Drive policy governance, approvals, and rollout communications.
• Collaborate with IT, Privacy, Legal, P&O, Production Security, and corporate functions.
• Support Sony Group governance initiatives and ISMS activities.
• Act as trusted advisor across technical and non‑technical stakeholders.
• Monitor evolving regulatory requirements and recommend program improvements.

Skills

GRC experience

Policy development

Stakeholder management

Automation in security

AI-enabled workflows

Security frameworks

ISO 27001

Education

CISA

CISM

CRISC

CISSP

Tools

ServiceNow

AuditBoard/Optro

Smartsheet

Job description

Sony Pictures Entertainment, Inc. is seeking a senior GRC leader to build and scale enterprise governance, risk, and compliance programs across its affiliates.

You will drive PCI DSS, ISO 27001, privacy controls, and security governance frameworks while aligning with Sony Group initiatives. You’ll partner with IT, Legal, Privacy, P&O, and Production Security to automate control assessments and report on risk posture.