Security4media Project Manager

The European Broadcasting Union EBU is looking for a Security4Media Project Manager.

ABOUT SECURITY4MEDIA

Security4Media is a cross-industry association gathering stakeholders across the media sector including broadcasters, content and service providers, media system vendors, service providers, R&D organizations. The aim of Security4Media is to improve Cybersecurity and Trust in Media.

It has initially 2 committees: Cybersecurity and Content Provenance committees.

The Cybersecurity committee supports media and vendors in implementing cybersecurity best practices and reaching similar levels of security maturity as in IT.
It assists media and vendors in identifying vulnerabilities in products and systems, speed-up remediation and streamline the vulnerability management process to mitigate risk of exploits by attackers. For that purpose, Security4Media goal is to become a CVE (Common Vulnerability and Exposure) Numbering authority as commonly defined in the IT and SW industry.

Security4Media members share threat intelligence and early warning to the industry where and new vulnerabilities are identified.
Goal of Security4Media is also to incentivize media and vendors to improve their cybersecurity by obtaining Security4Media labels.

Security4Media is an independent non-for-profit association with its own legal identity, funding and governance.

PRINCIPAL RESPONSIBILITIES OF THIS POSITION

The Security4Media Project Manager has a key role in building the association. He/she will be the go-to person for all Security4Media Cybersecurity Committee technical and project coordination matters. The position covers several key areas:

• Cybersecurity Audits: Conduct regular audits of organizations to identify and mitigate security risks.
• Security4Media Labels: Contribute to the development and implementation of a labeling system to recognize organizations with strong cybersecurity practices.
• Scanning and Pen-Testing: Perform on-demand scanning and pen-testing, collaborate with customers and vendors to minimize risks of exploitation and remediate to found vulnerabilities.
• CVE Numbering Authority: Establish and manage a CVE Numbering Authority (CNA) to streamline vulnerability tracking and reporting.
• Project Management: Oversee technical projects, coordinate with internal and external stakeholders, and report on project progress.
• Technical Leadership: Stay up-to-date with industry trends, provide technical guidance, and contribute to the development of best practices.
• Strategic Planning: Contribute to the development of Security4Media's strategic direction and goals.
• Stakeholder Engagement: Represent Security4Media at industry events, build relationships with members and partners, and communicate effectively with diverse audiences.
• Administrative Tasks: Manage administrative duties, including website updates, membership management, and meeting coordination.

YOUR SKILLS AND EXPERIENCES

• 2-5 years of professional experience in a similar role preferable with media background
• Proven track record in project management and community management
• Experience in scanning general IT ( attack surface mapping, Subdomain and DNS takeovers, DNS server misconfiguration, email authentication etc)
• Experience in pen-testing IP-based systems
• Strong technical background, particularly in Software Development, Information System Security and Privacy, and TCP/IP Networking
• Familiar with IP/Cloud media infrastructures and fundamentals on ST2110 Media workflows
• Excellent communication and interpersonal skills
• Ability to work independently and as part of a team

LANGUAGE – Excellent written and oral skills in English

TOOLS - Proficient with tools for Vulnerability Assessments, (Web-)Application-Testing and Firmwares and Protocols analysis (e.g. Burpsuite, Nmap, Wireshark, Ghidra, gdb)

ONCE ON BOARD YOU WILL
Be part of an outstanding diverse and inclusive multicultural and international team.
Work with accomplished and engaging professionals coming from a wide variety of backgrounds and covering an impressive range of professions both in and outside of the broadcasting realm.

ABOUT THE EBU
Discover more about the EBU at www.ebu.ch.

ADDITIONAL INFORMATION

More info in the job description attached.
We will not accept any applications after the closing date and we will contact only the candidates who correspond to the requirements.
The EBU is an equal opportunities employer committed to building an inclusive workplace where everyone feels heard, safe and valued through a culture free of discrimination, we welcome applications from all communities.
ONLY APPLICATIONS VIA OUR RECRUITMENT PORTAL WILL BE CONSIDERED.