Director of Cybersecurity
Overview
ZeniMax Media, a renowned global developer and publisher of video games, is seeking a Director of Cybersecurity to lead our security strategy, governance, and operations. This senior leader will be responsible for defining and maintaining a holistic view of ZeniMax’s cybersecurity posture, spanning studios, publishing functions, central platforms, and infrastructure.
The ideal candidate will serve as a critical bridge between ZeniMax and Microsoft Gaming’s central security team, ensuring alignment with Microsoft's Secure Future Initiative (SFI). This includes setting clear expectations about which aspects of SFI are being prioritized within ZeniMax, and ensuring consistent adoption, reporting, and accountability across our organization.
Responsibilities:
Strategic Cybersecurity Leadership
- Define and drive the cybersecurity strategy across ZeniMax studios and publishing functions.
- Maintain a real-time, comprehensive view of ZeniMax’s cybersecurity posture, leveraging dashboards, telemetry, and reporting tools.
- Ensure security considerations are embedded in infrastructure, product, and platform roadmaps.
- Champion proactive risk mitigation and long-term security maturity planning.
Microsoft Coordination & SFI Alignment
- Act as the primary liaison with Microsoft Gaming’s central security team on strategic initiatives, incident coordination, and shared services.
- Set expectations for which SFI pillars and capabilities are adopted by ZeniMax, aligning business and security needs with the broader Gaming roadmap.
- Track and communicate ZeniMax’s progress on SFI implementation, identifying deltas and local adaptations as needed.
Operational Security & Risk Management
- Oversee vulnerability management, secure development practices, cloud and network security, and endpoint protections.
- Partner with platform, infrastructure, and IT teams to ensure enterprise-grade defense across all environments.
- Conduct security reviews and threat modeling for critical systems and services.
Organizational Enablement
- Develop and enforce ZeniMax-specific security policies and practices that align with Microsoft’s enterprise standards.
- Promote a culture of shared security ownership, from engineering to executive teams.
- Deliver security training and awareness programs across studios and functions.
Qualifications
- 10+ years of progressive experience in cybersecurity, with 5+ years in a leadership capacity.
- Proven success in defining and executing security strategies in complex, distributed technical environments.
- Strong experience coordinating with enterprise-scale security organizations, preferably within Microsoft or comparable ecosystems.
- Knowledge of Microsoft security architecture and tools (e.g., Microsoft Defender suite, Azure Security Center, Entra ID).
- Experience implementing elements of Microsoft’s Secure Future Initiative (SFI) or similar enterprise security transformations.
- Bachelor's degree in Information Security, Computer Science, or equivalent experience.
Preferred Skills
- Gaming, media, or technology industry background, especially with live service platforms.
- Certifications: CISSP, CISM, OSCP, or Azure Security Engineer Associate.
- Familiarity with NIST, ISO 27001, GDPR, and global data privacy laws.
- Ability to communicate effectively at both technical and executive levels.