The posting
The Information Security Officer (ISO) is a Practice Group/Network embedded security & risk subject matter expert, charged with supporting the Omnicom Security Services (OSS) function and related programs. The role is focused on the governance and compliance with OSS policies, standards, procedures and guidelines to prevent the unauthorized use, release, modification or destruction of data, specific to their regional Omnicom business groups. ISOs will also be expected to be a security evangelist providing internal security consultancy to support business strategy and identify information security related risks and proactively work within their business functional area and all supporting departments to ensure that Information risks are identified, assessed, and mitigated in all situations where possible.
As a member of the team, you will also have strong media production skills and a proven track record of managing security in operations programs, strategic services, production workflow security, events or physical security experience, media creation and projects to minimize risk exposure to the business. You will partner closely with creative, production, and operations teams to ensure security controls are practical, risk-based, and appropriate to real-world production environments. The role is hands-on, execution-focused, and tailored to the unique demands of film, photography, and content production.
The position may be in an approved Omnicom office, based upon Practice needs and reporting into designated Practice Business Information Security Officer (BISO).
Key focus areas
- Build and maintain relationships with business units and stakeholders to support security activities, including but not limited to, responding to client requirements such as RFP/RFI, security questionnaires, and audits
- Strong understanding of production and content security principles and industry best practices.
- Willingness and ability to travel internationally to support productions as required.
- Demonstrated experience designing and executing security controls in fast-paced, real-world production settings.
- Work with Practice BISO and OSS to deliver operational tasks including, but not limited to, assessment of technical architecture changes, supply chain risk management, and monitoring of security controls and policy adherence in line with OMC policies and standards
- Partner with Market Security to identify and manage potential security risks and governance issues and develop remediation/treatment plans to resolve the risk or reduce the risk to an acceptable level, aligned with the OSS Risk Management Framework.
- Assist in the coordination and delivery of Practice/Network information security audits, inspections, tests, and reviews
- Work with Practice BISO to supplement the global Information Security Awareness training curriculum, with Practice or trending security specific content
- In conjunction with colleagues from OSS, Legal, Privacy and Compliance, evaluate and disseminate regulatory information security rules, laws, and best practices, and collaborate with internal and external counsel as needed
- Support response to Practice related security incidents, providing timely reports during the incident and remediation, as well as proposing solutions to anticipate, prevent, or mitigate future incidents
- Collaborate with agency staff and IT to ensure information security risks in both ongoing and planned operations are properly considered and that all compliance matters are being adhered to as required
- Support global security transformation projects and advise on the Omnicom IT projects as the security consultant / OSS Team alignment
- Monitor information security trends and evolving technologies and keep senior management informed about related information security issues and implications for both the Practice Security function as well as the assigned region
- Support delivery of information security services in accordance with OSS requirements, delivering to timescales, quality measures and standards including change control
- Enable a proactive and innovative approach to continuous improvement for the Practice’s security and risk management posture
- Understand potential and emerging information security threats, vulnerabilities, and control techniques and communicate this information to appropriate team members throughout the Practice on a timely basis
- As needed, provide input into the analysis and discussion of security policies, standards and practices.
- Responsible for protecting the secrecy and security of product and content during production shoots.
Qualifications/Experience
- Previous experience in a Security Role, with Minimum 5 years of experience in IT Security, IT Audit or related area
- CISSP or CISM certification preferred
- Familiarity with Information Security industry standards/best practices and relevant regulations (e.g., ISO27001, PCI DSS, HIPAA, TISAX, SOX, NIST)
- Bachelor’s degree preferred or equivalent experience in Information Security, Computer Science, Business, Marketing or related field
Skills/Abilities
- Excellent interpersonal skills, roll-up-your-sleeves personality and a team player
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences
- Have strong media production security experience production workflow security, security tool knowledge (e.g., digital enterprise for media, chain of custody, encryption, watermarking, etc.).
- Possess problem solving and analytical skills
- Demonstrate the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
- Track record of effectively working across multiple global locations, with a solid understanding of the challenges and benefits
- Willingness to travel as needed
