Teams at Sotheby's

Executes and helps define the information security strategy by leading risk assessments, audits, control testing, policy development, business continuity planning, vendor risk reviews, incident response, and remediation tracking. The role aligns security programs with CIS, NIST, ISO 27001, and SOC 2 frameworks, maintains risk and compliance reporting, and mentors junior security staff while partnering with global business and IT leaders.