Information Security Officer

Overview

The Information Security Officer (ISO) operates as a specialized subject matter expert embedded within the Practice Group/Network to support Omnicom Security Services (OSS) and associated initiatives. This position ensures adherence to OSS policies, standards, and guidelines to safeguard sensitive data within the regional Omnicom business sectors. The ISO serves as a security advocate, offering internal consultancy to align with business objectives, identify potential information security risks, and collaboratively devise strategies to mitigate those risks across functions.

Role Responsibilities

• Establish and nurture collaborative relationships with business units and key stakeholders to facilitate security operations, including responding effectively to client demands like RFPs, RFIs, security questionnaires, and audits.
• Leverage extensive knowledge of production and content security standards and industry best practices.
• Be prepared and available for international travel to support production activities when required.
• Design and implement security measures that are practical and risk-informed within active production environments.
• Collaborate with Practice BISO and OSS teams to execute operational tasks such as evaluating technical architecture modifications, managing supply chain risks, and overseeing adherence to security policies and controls in compliance with Omnicom standards.
• Work alongside Market Security to identify and address potential security threats and governance challenges by formulating appropriate remediation plans aligned with the OSS Risk Management Framework.
• Assist in organizing and executing information security audits, tests, inspections, and reviews relevant to the Practice and Network.
• Contribute to enhancing the global Information Security Awareness training by incorporating Practice-specific or emerging security content.
• Coordinate with colleagues from OSS, Legal, Privacy, and Compliance teams to interpret regulatory information security mandates and cooperate with legal counsel as necessary.
• Support incident response efforts related to security breaches within the Practice by delivering timely reporting, analysis, and proposing preventative measures for future risk reduction.
• Work jointly with agency staff and IT departments to ensure ongoing and planned operations properly assess information security risks and comply with all relevant standards.
• Advise and participate in global security transformation projects and provide security consultancy for Omnicom IT initiatives in alignment with OSS.
• Stay informed on evolving information security threats and technologies, updating senior management on implications for the Practice and regional security operations.
• Deliver information security services consistent with OSS standards, ensuring adherence to quality and change management protocols.
• Promote continuous innovation and proactive enhancements to the Practice's security and risk management frameworks.
• Monitor emerging threats, vulnerabilities, and controls, ensuring timely communication of these insights across the Practice.
• Provide feedback on security policy development and related standards as needed.
• Maintain the confidentiality and security of products and content throughout production shoots.

Qualifications and Experience

• Minimum of 5 years experience in IT Security, IT Audit, or comparable security disciplines.
• Preference for CISSP or CISM certified professionals.
• Well-versed in information security frameworks and standards such as ISO27001, PCI DSS, HIPAA, TISAX, SOX, and NIST.
• Bachelor’s degree or equivalent experience in Information Security, Computer Science, Business, Marketing, or related fields.

Skills and Competencies

• Strong interpersonal abilities with a proactive, collaborative work ethic and a hands-on approach.
• Exceptional written and verbal communication skills, capable of conveying complex security and risk matters to both technical and non-technical stakeholders.
• Demonstrated expertise in media production security, including workflow protection and familiarity with security tools such as digital enterprise media platforms, chain of custody protocols, encryption, and watermarking technologies.
• Advanced analytical and problem-solving capabilities.
• Proven capacity to handle multiple projects concurrently under tight deadlines and thrive in dynamic, high-pressure environments.
• Experience coordinating work across diverse global locations with an understanding of associated challenges and benefits.
• Willingness to undertake travel commitments as required.