About the role
Position Summary
The Information Security Director leads information security for Hearst Newspapers (HNP) and is responsible for HNP information security leadership, implementation, and compliance. The director translates Hearst corporate requirements into priorities and practices for HNP and represents HNP needs in discussions about enterprise security strategy and roadmap. Reporting to the SVP Technology, HNP, and in partnership with the SVP of Product and Strategy, the director sets HNP security priorities and provides strategic, operational, and tactical direction to HNP teams, including application owners, engineers, and executives. The director leads a small HNP security staff and works in a matrixed manner with HNP business and technology teams and Hearst Technology Services (HTS). The director ensures HNP compliance with the Hearst Corporate Information Security Policy (HISP), establishes effective operational protocols, and coordinates security policy education and enforcement.
The director combines security program leadership with technical judgment to guide and, when needed, perform security engineering. The director leads technical work through direct reports and matrix partners, and may personally implement or troubleshoot controls, fixes, upgrades, automation, and other engineering tasks when team capacity, urgency, or technical complexity requires it.
This position requires strong written and oral communication skills: explaining detailed technical information to audiences of varying experience and skill level and speaking confidently to large groups, corporate management, vendors, and service providers. The director contributes HNP requirements and lessons to the enterprise security strategy and roadmap.
About Hearst Newspapers
HNP is the operating group responsible for Hearst’s newspapers, local digital marketing services businesses and directories. With more than 2,500 colleagues across the nation, HNP publishes 30 dailies and 50 weeklies. HNP is investing in innovative ways to tell stories — expanding newsrooms and evolving platforms — to serve the 45 million readers a month who rely on its content to help them make decisions, take action and be inspired. From AI-powered newsroom tools to smarter sales strategies, HNP teams are putting innovation to work — enhancing experiences for both readers and employees. HNP consists of multiple groups including traditional newspaper technologies, digital systems, digital advertising fulfillment, and syndication services.
Essential Job Duties
Reads, understands, and ensures HNP compliance with the HISP.
Serves as a trusted security advisor to HNP lines of business.
Leads a small HNP security staff of engineers and compliance professionals.
Coordinates regularly with the HTS Governance, Risk, and Compliance team on enterprise policy, risk, assurance, and reporting, keeping HNP program ownership and HTS’s enterprise governance responsibilities clear; the director owns implementation and security outcomes for HNP.
Analyzes technologies and establishes effective processes and protocols to identify risks to data integrity and security and prevent unauthorized access to HNP networks and systems.
Works in a matrixed manner across HNP groups and engineering teams to coordinate priorities, oversee vulnerability management and end-of-life (unsupported) systems, ensure HISP compliance, and deliver security outcomes without relying solely on direct reporting authority.
As needed, personally implements or troubleshoots security fixes, upgrades, and controls that support HISP compliance.
Oversees verification and validation of the HNP security program, using internal resources and HTS.
Coordinates third-party security assessments of HNP vendors and reviews security requirements in vendor contracts with the appropriate HNP, procurement, legal, and HTS partners.
Stays current on the cybersecurity threat landscape, especially as it affects newspaper and media organizations.
Leads HNP incident response, including communication with executives and affected team
Leads security-related projects from inception to successful completion and is capable of effectively coaching technology staff on appropriate security protocols and needs as they implement new technology into the organization.
Assumes responsibility for other duties as required or assigned.
Skills and Experience
At least 5 years of hands-on engineering or technical experience, plus at least 3 years of hands-on information security experience.
Experience leading or managing technical or security staff, including through matrix relationships.
Demonstrates solid organizational skills and the ability to multi-task, prioritize workload and delegate responsibilities.
Remains flexible and effective under stress in a constantly changing environment.
Demonstrates excellent judgment and the ability to make quick decisions and think outside the box when working with complex situations.
Is forward thinking and possesses business acumen.
Self-starter requiring minimal supervision.
Works effectively with a variety of personalities and adapts their approach to influence matrixed teams.
Education Requirements
Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent experience.
Preferred: Master’s degree, MBA, or other advanced degree in information assurance or technology.
Certification Requirements
CISSP (required); CISM or SANS/GIAC certification preferred.
Additional Information
Sponsorship:
This position does not provide immigration sponsorship. Applicants must have the right to work in the U.S. without immigration sponsorship.
Accommodations:
We are committed to an accessible application process. If you need an accommodation to apply, please contact
. This email address is for accommodation requests only.
Benefits
We support our employees through personal and professional development and promote physical, financial and emotional wellbeing for employees and their families. Our benefits include:
Physical Wellbeing:
Medical, dental and vision coverage to help keep you and your family healthy.
Invest in the Future:
Competitive retirement plan with a matching program in most markets.
Generous Paid Time Off:
Ample time off, including holidays and vacation.
Paid Parental Leave:
Paid leave to support growing families and new parents.
Monthly Child & Dependent Care Reimbursement:
Financial support for the care of your loved ones.
Emotional Wellbeing:
Mental wellness benefits to support your emotional wellbeing.
LGBTQ+ & Inclusive Health Services:
Inclusive healthcare designed for individual needs.
Fertility Coverage & Menopause Support:
Support throughout different stages of your health and family journey.
Pet Wellness Reimbursement & Rover Credits:
Support to help keep your pets happy and healthy.
And more:
Learn more about additional benefits and details
here.