Content Security & Compliance Engineer

Sony Pictures Imageworks is located on the unceded traditional territory of the Musqueam, Squamish, and Tsleil-Waututh First Nations. We are committed to respecting traditional lands, and working with communities towards reconciliation.

Sony Pictures Imageworks Canada Inc.

658 Homer Street., Suite 405, Vancouver, BC, V6B 2R4

Language in work environment - English

Benefits per company policy: include healthcare, tuition reimbursement, RRSP's, Sick and Vacation leave, standard increases as applicable

Job SummaryWe are seeking a motivated and technically skilled Content Security & Compliance Engineer to join our Content Protection & Compliance team. In the Media & Entertainment industry, our most valuable assets are our stories, digital content, and production technologies. This role will contribute to our security controls, compliance requirements, and engineering practices effectively protecting our intellectual property while enabling efficient production workflows.

As a member of the Content Protection & Compliance team, you will collaborate with Engineering, Security Operations, Production, Infrastructure, and Audit teams to assess risk, validate security configurations, operate compliance monitoring tools, and integrate security into technology solutions and production processes. This is an excellent opportunity for someone who enjoys combining hands-on technical work with security analysis, compliance, and collaboration across multiple technology disciplines.

Education and Certifications

Formal Education

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience.

Preferred Certifications

• CISSP – Certified Information Systems Security Professional
• CCSP – Certified Cloud Security Professional
• AWS Certified Security – Specialty
• SABSA
• Trusted Partner Network (TPN) Assessor
• Or equivalent industry-recognized cybersecurity certifications

Primary areas of responsibility will include:

• Initiates business and technical gap assessments to identify security, compliance, and operational risks.
• Leads risk assessments and track remediation efforts through completion.
• Develops and maintains security standards, procedures, technical documentation, and compliance artifacts.
• Assess, implement, configure, and operate security compliance monitoring, SIEM, and security validation tools.
• Maintain configuration compliance solutions, including OpenSCAP and similar technologies, to validate system configurations against security baselines.
• Evaluate cloud security services, validating security controls, and recommending secure configurations.
• A key contributor to the Security Operations team, supporting operational security initiatives and incident response activities as needed.
• Participate / Lead internal and external audit activities by providing technical evidence, documentation, and remediation guidance.
• Collaborate closely with Engineering teams to review solution designs and advise on secure implementations.
• Partner with Production and business stakeholders to develop secure, scalable, and frictionless workflows that protect content without impeding creativity.
• Collaboratively evaluate new technologies and security solutions to determine their effectiveness in protecting enterprise and production environments.
• Support and guide security controls align with industry standards and organizational policies.

Experience:

• Approximately 5-8 years of experience in cybersecurity, security engineering, compliance, infrastructure security, or a related technical discipline, (preferably includes time supporting Media & Entertainment, gaming, broadcasting, streaming, or digital content production environments).
• Strong experience implementing and validating secure system configurations using industry security baselines and benchmarks.
• Experience operating security compliance, vulnerability management, SIEM, or configuration assessment tools.
• Strong working knowledge of cloud security principles and common cloud security controls.
• Understanding of industry security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, SOC 2, or similar.
• Understanding of secure network architecture, network segmentation, Zero Trust principles, and hybrid cloud environments.
• Experience providing technical security guidance to engineering or infrastructure teams.
• Strong skills in scripting and automation using Python, PowerShell, Bash, or similar languages.
• Experience working with Infrastructure as Code (IaC) technologies, including Terraform, to support secure infrastructure deployments.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications:

• Experience with content protection, digital asset security, media workflows, and production technologies.
• Familiarity with DLP, SIEM, endpoint security, identity and access management (IAM), and cloud security.
• Experience supporting security audits and compliance assessments.
• Working knowledge of cloud platforms, including AWS, Azure, and Google Cloud.
• Detail-oriented, with the ability to perform repetitive tasks accurately and efficiently.
• Proactive with a strong focus on continuous improvement.
• Excellent written and verbal technical English, with strong documentation skills.
• Results-driven, with a consistent track record of meeting deadlines.
• Leads by establishing project management standards and driving organizational accountability.
• Thrives in fast-paced, production-focused environments, collaborating effectively across distributed software, infrastructure, and content delivery teams.

The anticipated base salary for this position is $104,200.00 - $135,500.00/annually. Benefits are per company policy: which include healthcare, tuition reimbursement, RRSP's, Sick and Vacation leave, standard increases as applicable. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

We value unique perspectives, and want diverse, unique talent to work with us. We encourage candidates from all identities to apply.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, colour, religion, sex, national origin, disability, age, sexual orientation, gender identity, or other protected characteristics.

Bachelor's degree in Computer Science, Information Security, IT, or related field, or equivalent experience. Approximately 5-8 years of experience in cybersecurity, security engineering, compliance, or infrastructure security, preferably in Media & Entertainment, gaming, broadcasting, streaming, or digital content production environments. Strong experience implementing and validating secure system configurations using industry security baselines and benchmarks. Experience operating security compliance, vulnerability management, SIEM, or configuration assessment tools. Strong working knowledge of cloud security principles and common cloud security controls. Understanding of industry security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, SOC 2, or similar. Understanding of secure network architecture, network segmentation, Zero Trust principles, and hybrid cloud environments. Experience providing technical security guidance to engineering or infrastructure teams. Strong skills in scripting and automation using Python, PowerShell, Bash, or similar languages. Experience working with Infrastructure as Code (IaC) technologies, including Terraform, to support secure infrastructure deployments. Strong analytical, troubleshooting, communication, and documentation skills. Familiarity with DLP, SIEM, endpoint security, identity and access management (IAM), and cloud security. Experience supporting security audits and compliance assessments. Working knowledge of cloud platforms, including AWS, Azure, and Google Cloud.