VP, Product Security

Warner Bros. Discovery (WBD) is seeking a visionary Vice President, Product & Application Security to lead the security strategy and execution for its world-class Direct-to-Consumer (DTC) portfolio – including HBOMax, Discovery+, CNN streaming, and other flagship digital products. This executive will be accountable for protecting millions of global customers' data, securing complex application architectures, and ensuring the resilience of revenue-generating systems in a rapidly evolving, high-scale environment.

The ideal candidate will bring deep expertise in application security, including secure software development practices, threat modeling, code analysis, and vulnerability management across large-scale distributed systems. As a key member of WBD's Global Information & Content Security leadership team, you will collaborate closely with engineering, product, and business executives to embed security into every phase of application and product development – from concept and architecture through deployment and operations.

You will drive a culture of security-first innovation, ensuring that WBD's applications and digital experiences are both secure and seamless for a global audience. This is a rare opportunity to shape the future of secure streaming and digital engagement through leadership in both product and application security for one of the world's most recognized media companies.

• Define and lead the global product security strategy across Discovery+, CNN, and other DTC platforms.
• Translate cybersecurity requirements into scalable, business-aligned solutions.
• Prioritize investments and roadmap initiatives based on risk and business impact.

• Champion secure-by-design and secure-by-default principles, ensuring that security patterns and controls are integrated throughout the application and product development lifecycle.
• Collaborate with engineering and architecture teams to design and implement secure application architectures, protecting consumer-facing technologies at scale.
• Drive adoption of threat modeling, secure coding, code reviews, and secure deployment practices across global development teams.
• Partner with platform engineering to automate security testing and vulnerability management within CI/CD pipelines.

• Oversee application and product security design reviews, architecture assessments, penetration testing, vulnerability management, monitoring, and 24x7 incident response for all DTC platforms.
• Ensure comprehensive visibility into application-layer risks, including API security, identity management, and data protection.
• Partner with Privacy, Legal, and Compliance teams to ensure adherence to GDPR, CCPA, and other global data protection regulations.
• Provide executive-level reporting on application security posture, threat readiness, and overall risk management metrics.

• Serve as a security thought leader and trusted advisor to Product, Engineering, and DTC business executives.
• Represent Product & Application Security in key governance forums, steering committees, and board-level discussions.
• Advocate for security as a business enabler, ensuring that protection measures support customer trust, brand reputation, and revenue growth.
• Partner with Dev Ops, Cloud, and Infrastructure leaders to ensure end-to-end security coverage from application through platform layers.

• Build, mentor, and retain a high-performing global team of application security engineers, architects, and product security leaders.
• Foster a culture of innovation, accountability, and continuous improvement within the Product & Application Security function.
• Lead workforce planning to scale with evolving platform architectures, emerging threats, and business needs.
• Promote cross-functional training and career growth to deepen application security expertise across all product teams.

• Proven success securing large-scale, consumer-facing platforms (streaming, media, or subscription-based…