Sr. Data Security Architect - Governance

THE ROLE

The Principal Data Security Architect / Governance will be a pivotal leader in establishing and maturing Live Nation Entertainment's data security program. This role is responsible for defining the strategic vision, architectural frameworks, and comprehensive governance policies that ensure the protection of our data assets across their entire lifecycle. Operating at the intersection of high-level strategy and deep technical guidance, this individual will provide expert leadership in designing secure data solutions, defining standards, influencing adoption of best practices, and driving compliance within our AWS and Databricks-centric environment.

WHAT THIS ROLE WILL DO

• Strategic Vision and Roadmap: Define and champion the multi-year data security strategy and roadmap for Live Nation Entertainment, aligning with organizational goals, regulatory requirements (GDPR, CPRA, SOC 2, ISO 27001), and emerging threats.

• Architectural Leadership and Standards Development: Lead the design of robust, secure data architectures for all data platforms (Databricks, SQL Server, AWS S3) and data flows, ensuring security by design. Develop and publish authoritative data security standards that guide secure implementation.

• Data-Based Threat Modeling (Primary Lead): Drive the methodology and execution of data-based threat modeling across our data ecosystem, analyzing what data exists where, its ownership, access patterns, encryption states, and retention lifecycle. This is a critical area for identifying major gaps and informing architectural decisions.

• Governance and Policy Development: Lead the development, formalization, and continuous improvement of data security policies, standards, and procedures, including data classification frameworks, data ownership models, access control principles (e.g., RBAC, ABAC), and data lifecycle management.

• Compliance and Risk Management: Serve as the primary subject matter expert for data security compliance, leading efforts to map controls to regulatory frameworks, conduct data security risk assessments, and support internal and external audits (including interaction with EY for SOX compliance).

• Team Leadership and Guidance: Collaborate with the Director to define team roles, responsibilities, and key initiatives. Provide strategic guidance and architectural expertise to Data Security Developers and Analysts, fostering their growth and ensuring alignment with strategic objectives.

• Technology Evaluation and Guidance: Research, evaluate, and provide architectural guidance on advanced data security technologies and tooling (e.g., DLP, automated data labeling/classification, specialized data system privilege/access governance tools), informing their potential adoption and integration.

• Remediation Planning: Define strategic remediation plans for significant security findings, ensuring alignment with architectural principles.

• ACLs (Advisory/Audit): Serve as the SME for network and user Access Controls related to the data environment, providing architectural and policy guidance, and acting as the internal audit data collection point of contact.

WHAT THIS PERSON WILL BRING

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field; Master's degree preferred.

• 10+ years of progressive experience in cybersecurity, with at least 5 years specifically in data security architecture or governance roles.

• Proven experience designing and implementing data security solutions in large-scale cloud environments, particularly AWS.

• Strong hands-on understanding of Databricks security architecture, including Unity Catalog, cluster policies, workspace configurations, network security (PrivateLink), and data plane isolation.

• Demonstrated experience or strong capability in leading data-based threat modeling exercises.

• Expertise in regulatory compliance frameworks such as GDPR, CPRA, SOC 2, ISO 27001.

• Demonstrated ability to develop and communicate complex technical strategies and policies to both technical and non-technical audiences.

• Excellent leadership, communication, and interpersonal skills, with a proven ability to influence and build consensus.

• Relevant industry certifications (e.g., CISSP, CISM, CDPSE, AWS Certified Security).

BENEFITS & PERKS

Our motto is ‘Taking Care of Our Own’ through 6 pillars of benefits:

• HEALTH: Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA)

• YOURSELF: Free concert tickets, generous paid time off including paid holidays, sick time, and personal days

• WEALTH: 401(k) program with company match, stock reimbursement program

• FAMILY: New parent programs including caregiver leave and baby bonuses, plus fertility, adoption, foster, or surrogacy support

• CAREER: Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment

• OTHERS: Volunteer time off, crowdfunding match