Information Security Manager

Cyrillica Group Localization Studio https://cirilicastudio.com is a provider of audiovisual localization services on the international market since 2009. We offer a full cycle of services, including theatrical and TV dubbing, voice-over, subtitling, and localization for films and games into over 50 languages.

Our portfolio boasts over 1,000,000 minutes of localized content and the successful delivery of 500+ projects for industry leaders such as Disney, Sony Pictures, TV channels and VOD platforms.

The role

We are seeking an experienced Information Security expert with a strong focus on media content protection to lead our TPN readiness and certification project on a part-time. You will work autonomously with our management and IT team, assess our current state, build the roadmap, and guide us through to the TPN assessment. The engagement may be extended into an ongoing advisory retainer based on results.

Project goal

Prepare the company for and successfully complete the TPN assessment, achieving the target TPN Shield level within 6 months.

Project scope and deliverables

1. Gap assessment: evaluate current controls against TPN requirements and MPA Content Security Best Practices (physical, administrative, technical).
2. Remediation roadmap: prioritized plan with owners, timelines, and effort estimates.
3. Policies and documentation: develop or update security policies, procedures, risk register, and the governance framework (including ICT risk management).
4. Technical guidance: advise on IAM (MFA, RBAC, least privilege), encryption, network security, vulnerability and patch management, hardening, and secure content workflows (ingestion, QC, mastering, delivery, watermarking, secure transfer).
5. Audit preparation and support: evidence collection, self-assessment, mock audit, and direct communication with TPN assessors.
6. Client interface: support responses to studio security questionnaires and requirements.
7. Handover: train the team and document processes so the company can maintain compliance independently.

Required qualifications

• 5+ years in information security, including at least 2 years in governance, compliance, or audit-facing roles.
• Hands-on experience with TPN (assessments, remediation, or certification) or equivalent MPA / studio security audits.
• Strong practical knowledge of ISO 27001, SOC 2, GDPR, and NIS2, with proven experience in security governance and ICT risk management.
• Experience with several of the following frameworks: DORA, PCI DSS, PSD2.
• Solid technical background in IAM, network security, cloud and on-prem infrastructure, encryption, and vulnerability management.
• Experience working directly with external auditors and client security teams.
• Fluent English (you will communicate with studio security teams and assessors) and Russian at a working professional level.
• Proven track record of delivering similar projects independently and on schedule.

Nice to have

• CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, CRISC, or similar.
• Experience in media, entertainment, post-production, or localization.
• Knowledge of DRM, forensic watermarking, and secure file transfer.

We offer

• Part-time, ~15–20 hours/week, flexible schedule.
• Project duration: 6 months, with possible extension.
• Freelance agreement.
• Remote job.

Send your CV in English with a brief cover letter hr@cirilicastudio.com