Director, Enterprise Security Architecture & Assurance

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

The Opportunity: 

The Director, Enterprise Security Architecture & Assurance leads Mattel’s security assessment, vulnerability management, application security, and cloud security functions. This role ensures security is embedded by design across Mattel’s enterprise platforms, digital products, cloud services, and third-party ecosystem.

The Director is a member of the Cyber Security Leadership Team and a standing member of the Enterprise Architecture Council, influencing enterprise security strategy, architecture standards, and technology decisions to protect Mattel’s brands, consumer data, and intellectual property.

What Your Impact Will Be: 

Security Assessments & Due Diligence

• Lead enterprise security assessments, including third-party, vendor, and supply chain risk evaluations as well as M&A security due diligence.
• Define assessment methodologies aligned to NIST, ISO, and SOC 2 standards.
• Partner with Legal, Privacy, Procurement, and business leaders to communicate risk and remediation priorities.

Vulnerability Management

• Own Mattel’s enterprise vulnerability management program across infrastructure, applications, and cloud.
• Work closely with operational IT and Engineering teams to remediate vulnerabilities and control deficiencies.
• Establish risk-based prioritization, remediation SLAs, and executive-level reporting.
• Define and track vulnerability and control-maturity metrics, providing regular reporting to senior leadership and supporting Board-level cyber risk visibility.

Cloud & Application Security

• Define and govern cloud security architecture for public and hybrid cloud environments.
• Establish cloud security guardrails, reference architecture, and patterns aligned to shared responsibility models to enable secure and scalable cloud adoption.
• Lead the application security program, including secure SDLC practices and code reviews aligned to OWASP.
• Oversee application security tooling and automation (e.g., SAST, DAST, SCA) to scale secure development practices.
• Partner with engineering teams to embed security into cloud-native and application designs.

Architecture & Governance

• Serve on the Enterprise Architecture Council, ensuring security and privacy are embedded in technology standards and design decisions.
• Review and influence major architecture initiatives and platform investments to ensure alignment with enterprise security strategy and risk posture

Cyber Leadership & Collaboration

• Actively contribute as a member of the Cyber Security Leadership Team, shaping strategy, roadmap, and investment priorities.
• Advise senior leaders on security risk, architectural tradeoffs, and control maturity.
• Act as a trusted advisor to executive stakeholders on emerging threats, control gaps, and risk acceptance decisions.

People Leadership

• Build and lead high-performing security teams and strategic partners.
• Drive a culture of accountability and continuous security improvement.

What We’re Looking For:

• 10+ years in cybersecurity or security architecture, with 5+ years in senior leadership roles, including leading managers or enterprise-scale security programs
• Expertise in security assessments, vulnerability management, cloud security, and application security.
• Strong knowledge of NIST, ISO 27001, SOC 2, and OWASP.
• Proven ability to partner with operational teams to drive risk remediation.

Preferred

• Experience supporting consumer-facing digital platforms or global brands.
• M&A security due diligence experience.
• CISSP, CISM, and/or cloud security certifications.

*The pay range is indicative of projected hiring range, however base pay will be determined based on a candidate’s work location, skills and experience. Mattel offers competitive total pay programs, comprehensive benefits, and resources to help empower a culture where every employee can reach their full potential. 

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Join Mattel's Talent Community and start receiving exciting updates about our company, our employees, and our culture. Also, interested in signing up for job alerts? Do so here!

How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment without regard to race, ethnicity, color, national origin, religion, sex, gender, gender identity or expression, sexual orientation, veteran and protected veteran status, disability status, and or any other basis protected by applicable federal, state or local law.

Pursuant to the Los Angeles Fair Chance Ordinance and the California Fair Chance Act, qualified applicants with arrest or conviction records will be considered for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy