Senior Manager Information Security

MSG Entertainment Holdings, LLC; New York (NY); On-site; USD 175,000 - 190,000; Full time

Job summary

MSG Entertainment Corp. is seeking a Senior Manager of Information Security to lead governance, risk, and compliance efforts across the enterprise.

You will drive policy development, risk assessments, and audits while coordinating with Legal, Privacy, IT, and Engineering teams to implement robust security controls. You will manage IAM, zero-trust, vulnerability remediation, and security monitoring initiatives, reporting to executives and ensuring regulatory alignment with GDPR, CCPA and MPAA

Qualifications

• 8+ years of related experience in information security governance, risk, and compliance.
• Bachelor’s degree or equivalent.
• MS in Cybersecurity preferred; undergraduate STEM degree accepted.

Responsibilities

• Act as the primary Program Manager for enterprise-wide security implementations (e.g., IAM rollouts, zero-trust adoption, vulnerability remediation).
• Develop, document, and enforce security policies, standards, and control frameworks (NIST, CIS, ISO, MPAA Best Practices).
• Oversee risk assessments, security reviews, and compliance audits to identify gaps and ensure adherence to regulatory requirements and standards.
• Collaborate with legal, privacy, and stakeholders to interpret regulatory requirements (GDPR, CCPA, TPN) and integrate into processes.
• Develop and maintain security baselines, control procedures, and governance artifacts for Studio technology teams.
• Manage vendor risk by evaluating third-party adherence to security standards.
• Design and implement security monitoring tools and dashboards for posture and audit readiness.
• Support Incident Response and conduct post-incident reviews to improve controls.
• Liaise with auditors, coordinating evidence collection and audit responses.
• Develop and deliver security training and awareness programs.
• Support business continuity and disaster recovery planning to meet compliance.
• Drive continuous governance improvements through gap analysis and benchmarking.
• Prepare executive reports on compliance status, audit results, and risk trends.
• Perform other duties to advance MSG Threat Management mission.
• Ensure on-site guest experiences while upholding appearance guidelines.

Skills

GRC

Security governance

Risk management

Compliance

Audits

Policy development

Regulatory knowledge

Cloud security

IAM

Vulnerability management

Incident response

Stakeholder communication

Audit liaison

Education

Bachelor's degree

MS in Cybersecurity

Undergraduate degree in Computer Science/Engineering/MIS

Tools

ServiceNow GRC

Archer

Job description

Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment, delivering unforgettable experiences while forging deep connections with diverse and passionate audiences. The Company’s portfolio includes a collection of world-renowned venues – New York’s Madison Square Garden, Infosys Theater at Madison Square Garden, Radio City Music Hall, and Beacon Theatre; and The Chicago Theatre – that showcase a broad array of sporting events, concerts, family shows, and special events for millions of guests annually. In addition, the Company features the original production, the Christmas Spectacular Starring the Radio City Rockettes, which has been a holiday tradition for more than 90 years. More information is available at www.msgentertainment.com.

Who are we hiring?

The Senior Manager of Information Security will be a key leader in developing and advancingourinformationsecurity governance, risk, and compliance (GRC)programsand security delivery programs.The Senior Manager of Information Security willbe responsible forsecurity compliance, governance frameworks, risk management, and continuous monitoring to ensure MSGmaintainsa robust security posture aligned with industry best practices and regulatory requirements.

Acting as both a GRC SME and a Technical Program Manager, you willestablishsecurity policies, manage project portfolios, track key performance indicators, and drive the hands-on delivery of security controls and risk mitigation projects across the enterprise.

What will you do?

• Act as the primary Program Manager for enterprise-wide security implementations (e.g., IAM rollouts, zero-trust adoption, vulnerability remediation initiatives). Coordinate dependencies across Engineering, IT, Legal, Privacy, and Studio/Business Ops.
• Lead the development, documentation, and enforcement of security policies, standards, and control frameworks.(e.g., NIST, CIS, ISO,MPAABest Practices).
• Overseerisk assessments, security reviews, and compliance audits toidentifygaps and ensure adherence to regulatoryrequirements, internal standards,and industrybest practices.
• Collaborate with legal, privacy, and business stakeholders to interpret regulatory requirements (e.g., GDPR, CCPA, TPN) and ensure their integration into security and operational processes.
• Develop andmaintainsecurity baselines, control procedures, and governance artifacts to guide Studio technology teams.
• Oversee vendor risk management by evaluating and continuouslymonitoringthird-party adherence to security standards and requirements.
• Direct the design and implementation of security compliance monitoring tools and dashboards to track posture andmaintainaudit readiness.
• Provide support to the Incident Response team and contribute to post-incident reviews, emphasizing improvements to controls and the implementation of risk mitigation strategies.
• Serve as a liaison to internal and external auditors, managing evidence collectionand audit response processes.
• Develop anddeliversecurity training and awareness programs.
• Participate in business continuity and disaster recovery planningtoensurecompliance requirements are met.
• Drive continuous improvement of governance processes and security controls through proactive gap analysis, stakeholder collaboration, and industry benchmarking.
• Prepare executive-level reports and presentations on compliancestatus, audit results, risk trends, and governance initiatives.
• Perform other duties as needed toaccomplishthe overallThreat Managementmission at MSG.
• Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on-site.

What do you need to succeed?

• 8+ years of related experience
• Bachelor’s degree, or equivalent combination of education and experience
• Undergraduate degree in Computer Science,Engineering,or Management Information Systems
• MSin Cybersecurity preferred
• 5+ years of experience in Information Security with a focus on governance, risk, and compliance (GRC).
• Strong knowledge of regulatory requirements (e.g.,SOX, PCI, MPAA BestPractice)and industry frameworks (e.g., NIST, ISO, CIS).
• Experience leading audits and compliance assessments across Cloud environments (AWS, Azure, GCP) and On-Prem systems.
• Demonstrated experience developing andmaintainingsecurity policies, standards, and governance documentation.
• Strong understanding of risk management principles and methodologies, with experience performing risk assessments and mitigation planning.
• Familiarity with security technologies and tools (e.g., vulnerability management, identity & access management, endpoint protection), and how they tie into compliance reporting.
• Experience with compliance and governance platforms is a plus (e.g., ServiceNow GRC, Archer).
• Excellent communication and collaboration skills
• Ability to build strong relationships with internal and external stakeholders.

#LI- Onsite

Pay Range

$175,000—$190,000 USD

At MSG, we recognize the importance of upskilling employees’ talents and strengths so they can drive their careers forward. We are proud to offer a robust set of tools and resources to help employees understand their interests and purpose, harness their talents and obtain the skills they need to reach the next step in their careers. Growth and longevity for our employees are top priorities here.

We value diversity and are looking for extraordinary employees of all backgrounds! MSG is an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, sexual and reproductive health choices, national origin, citizenship, age, genetic information, disability, or veteran status. MSG complies with all applicable federal, state, and local laws governing nondiscrimination, including consideringrequests for reasonable accommodations as required.