Content Security & Compliance Engineer

Sony Pictures Imageworks is located on the unceded traditional territory of the Musqueam, Squamish, and Tsleil-Waututh First Nations. We are committed to respecting traditional lands, and working with communities towards reconciliation. Sony Pictures Imageworks Canada Inc. 658 Homer Street., Suite 405, Vancouver, BC, V6B 2R4 Language in work environment - English Benefits per company policy: include healthcare, tuition reimbursement, RRSP's, Sick and Vacation leave, standard increases as applicable Job Summary We are seeking a motivated and technically skilled Content Security & Compliance Engineer to join our Content Protection & Compliance team. In the Media & Entertainment industry, our most valuable assets are our stories, digital content, and production technologies. This role will contribute to our security controls, compliance requirements, and engineering practices effectively protecting our intellectual property while enabling efficient production workflows. As a member of the Content Protection & Compliance team, you will collaborate with Engineering, Security Operations, Production, Infrastructure, and Audit teams to assess risk, validate security configurations, operate compliance monitoring tools, and integrate security into technology solutions and production processes. This is an excellent opportunity for someone who enjoys combining hands-on technical work with security analysis, compliance, and collaboration across multiple technology disciplines. Education and Certifications Formal Education Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience. Preferred Certifications CISSP – Certified Information Systems Security Professional CCSP – Certified Cloud Security Professional AWS Certified Security – Specialty SABSA Trusted Partner Network (TPN) Assessor Or equivalent industry-recognized cybersecurity certifications Primary areas of responsibility will include: Initiates business and technical gap assessments to identify security, compliance, and operational risks. Leads risk assessments and track remediation efforts through completion. Develops and maintains security standards, procedures, technical documentation, and compliance artifacts. Assess, implement, configure, and operate security compliance monitoring, SIEM, and security validation tools. Maintain configuration compliance solutions, including OpenSCAP and similar technologies, to validate system configurations against security baselines. Evaluate cloud security services, validating security controls, and recommending secure configurations. A key contributor to the Security Operations team, supporting operational security initiatives and incident response activities as needed. Participate / Lead internal and external audit activities by providing technical evidence, documentation, and remediation guidance. Collaborate closely with Engineering teams to review solution designs and advise on secure implementations. Partner with Production and business stakeholders to develop secure, scalable, and frictionless workflows that protect content without impeding creativity. Collaboratively evaluate new technologies and security solutions to determine their effectiveness in protecting enterprise and production environments. Support and guide security controls align with industry standards and organizational policies. Experience: Approximately 5-8 years of experience in cybersecurity, security engineering, compliance, infrastructure security, or a related technical discipline, ( preferably includes time supporting Media & Entertainment, gaming, broadcasting, streaming, or digital content production environments). Strong experience implementing and validating secure system configurations using industry security baselines and benchmarks. Experience operating security compliance, vulnerability management, SIEM, or configuration assessment tools. Strong working knowledge of clou…