Business Information Risk Lead, Audible Security

DESCRIPTION

At Audible, we believe stories have the power to transform lives. It’s why we work with some of the world’s leading creators to produce and share audio storytelling with our millions of global listeners. We are dreamers and inventors who come from a wide range of backgrounds and experiences to empower and inspire each other. Imagine your future with us.

ABOUT THIS ROLE
As a Business Information Risk Lead at Audible, you'll be at the forefront of safeguarding our digital landscape, championing information security across our entire ecosystem. In this pivotal role, you'll shape the direction of Audible's security strategy, working closely with business and product teams to protect key assets and data. You'll conduct comprehensive security assessments, develop risk mitigation strategies, and provide expert guidance on complex security challenges. Your influence will extend beyond the security team as you partner with cross-functional groups to embed security best practices, fostering a culture of cybersecurity awareness. You'll drive continuous improvement by developing metrics, monitoring trends, and implementing pragmatic solutions that balance security needs with business goals. As a mentor and educator, you'll empower security engineers, champion initiatives, and provide training to both internal teams and external partners. Join us in building a secure future for Audible, where your expertise will directly impact the protection of our customers and the integrity of our business.

As a Business Information Risk Lead, you will...
- Play a role in Audible InfoSec & Security Engineer org and work closely with the Audible business and product community, setting direction for security of key assets, data, and business processes; serving as a subject matter expert resource for security engineers, security champions, and business leaders inside and outside of our organization
- Proactively assess, identify and develop recommendations regarding data protection, insider threat, data sharing, identity and access management, and third party risk issues and vulnerabilities by working with multiple stakeholder teams, including Privacy, Legal, HR, IT, etcetera
- Lead and execute internal security and data usage assessments, investigations and security audits, while also supporting enterprise wide information security and cyber risk assessments with technical and non-technical teams
- Contribute to the development of business risk, insider threat, and third party risk management strategic control requirements and roadmaps
- Contribute to new, and provide feedback on existing security standards and control requirements, GRC policy exceptions and risk issue management process
- Develop and maintain relevant security risk metrics to promote transparency across the organization; measures, monitors and reports on information security risks to management
- Provide guidance on risk, compliance, and policy to technical and non-technical internal customers, including security training and outreach to internal teams and external supply chain partners
- Apply your security and business knowledge to drive secure and pragmatic improvements broadly to Audible’s people, process, and assets, while making technical trade-offs between short versus long term security and business goals
- Work with senior leaders across the organization and design and deliver a comprehensive view of their risk profile, which helps them to have more transparency on the risk within their org

ABOUT AUDIBLE
Audible is the leading producer and provider of audio storytelling. We spark listeners’ imaginations, offering immersive, cinematic experiences full of inspiration and insight to enrich our customers daily lives. We are a global company with an entrepreneurial spirit. We are dreamers and inventors who are passionate about the positive impact Audible can make for our customers and our neighbors. This spirit courses throughout Audible, supporting a culture of creativity and inclusion built on our People Principles and our mission to build more equitable communities in the cities we call home.

BASIC QUALIFICATIONS

- BS in Cybersecurity, Computer Science, or other relevant degree.
- 5+ years in cyber and information security functions, especially in areas including Risk and Controls, Privacy, insider threat, business information security, identity and access management, third party risk, incident response, threat modeling.
- Experience with understanding risk mitigation and risk issue management, policy and standards, security frameworks (e.g. NIST, ISO, etc.)
- Experience with web and mobile application security, and cloud technologies threats and risks.
- Experience with using GenAI tools to improve processes
- Experience with the security risks GenAI poses and how to mitigate them
- Experience in mentoring a non-tech community on complex technical issues or ambiguous technical challenges. This includes translating risk for business leaders, helping them to understand how risk can impact the business