Director, Enterprise Security Architecture & Assurance

Posting Title : Director, Enterprise Security Architecture & Assurance

• Requisition Number : R
• Company : Mattel HQ, Inc.
• Location : El Segundo, California
• Address : 333 Continental Blvd, 90245
• Job Category : Information Technology
• Pay Range : USD $200,800 - $250,000 Yearly

The pay range is indicative of projected hiring range, however base pay will be determined based on a candidate's work location, skills and experience.

Mattel offers competitive total pay programs, comprehensive benefits, and resources to help empower a culture where every employee can reach their full potential.

CREATIVITY IS OUR SUPERPOWER.

It's our heritage and it's also our future. Because we don't just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard-when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

The Opportunity:

The Director, Enterprise Security Architecture & Assurance leads Mattel's security assessment, vulnerability management, application security, and cloud security functions. This role ensures security is embedded by design across Mattel's enterprise platforms, digital products, cloud services, and third‑party ecosystem.

The Director is a member of the Cyber Security Leadership Team and a standing member of the Enterprise Architecture Council, influencing enterprise security strategy, architecture standards, and technology decisions to protect Mattel's brands, consumer data, and intellectual property.

What Your Impact Will Be:

Security Assessments & Due Diligence

• Lead enterprise security assessments, including third‑party, vendor, and supply‑chain risk evaluations as well as M&A security due diligence.
• Define assessment methodologies aligned to NIST, ISO, and SOC 2 standards.
• Partner with Legal, Privacy, Procurement, and business leaders to communicate risk and remediation priorities.

Vulnerability Management

• Own Mattel's enterprise vulnerability management program across infrastructure, applications, and cloud.
• Work closely with operational IT and Engineering teams to remediate vulnerabilities and control deficiencies.
• Establish risk‑based prioritization, remediation SLAs, and executive‑level reporting.
• Define and track vulnerability and control‑maturity metrics, providing regular reporting to senior leadership and supporting Board‑level cyber risk visibility.

Cloud & Application Security

• Define and govern cloud security architecture for public and hybrid cloud environments.
• Establish cloud security guardrails, reference architecture, and patterns aligned to shared responsibility models to enable secure and scalable cloud adoption.
• Lead the application security program, including secure SDLC practices and code reviews aligned to OWASP.
• Oversee application security tooling and automation (e.g., SAST, DAST, SCA) to scale secure development practices.
• Partner with engineering teams to embed security into cloud‑native and application designs.

Architecture & Governance

• Serve on the Enterprise Architecture Council, ensuring security and privacy are embedded in technology standards and design decisions.
• Review and influence major architecture initiatives and platform investments to ensure alignment with enterprise security strategy and risk posture.

Cyber Leadership & Collaboration

• Actively contribute as a member of the Cyber Security Leadership Team, shaping strategy, roadmap, and investment priorities.
• Advise senior leaders on security risk, architectural tradeoffs, and control maturity.
• Act as a trusted advisor to executive stakeholders on emerging threats, control gaps, and risk acceptance decisions.

People Leadership

• Build and lead high‑performing security teams and strategic partners.
• Drive a culture of accountability and continuous security improvement.

What We're Looking For:

• 10+ years in cybersecurity or security architecture, with 5+ years in senior leadership roles, including leading managers or enterprise‑scale security programs.
• Expertise in security assessments, vulnerability management, cloud security, and application security.
• Strong knowledge of NIST, ISO 27001, SOC 2, and OWASP.
• Proven ability to partner with operational teams to drive risk remediation.

Preferred

• Experience supporting consumer‑facing digital platforms or global brands.
• M&A security due diligence experience.
• CISSP, CISM, and/or cloud security certifications.

Who We Are:

Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world's leading retail and e‑commerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel's award‑winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment without regard to race, ethnicity, color, national origin, religion, sex, gender, gender identity or expression, sexual orientation, veteran and protected veteran status, disability status, and or any other basis protected by applicable federal, state or local law.

Pursuant to the Los Angeles Fair Chance Ordinance and the California Fair Chance Act, qualified applicants with arrest or conviction records will be considered for employment.

#J-18808-Ljbffr