CAA operates at the intersection of high-value IP, celebrity data, and global deal flow - a threat surface that spans client PII for thousands of A-list talent, confidential contract and financial data, and live-event infrastructure across entertainment and sports. The agency's footprint stretches from Los Angeles headquarters to offices in London, Beijing, Shanghai, and eight other cities, each node handling sensitive negotiations, media finance transactions, and endorsement pipelines that move billions.
The $7 billion majority-stake acquisition by Groupe Artémis in 2023 raised the agency's profile as a target. CAA's sports division alone represents more than 2,000 athletes, coaches, and broadcasters, while its verticals span filmed and live entertainment, digital media, brand management, and consumer investing. That means security teams are defending against credential-stuffing and social engineering aimed at high-profile individuals, insider risk around pre-release content and deal terms, and the operational complexity of securing endpoints and identities across a globally distributed workforce.
On the technical side, this is a role where the stakes are tangible: protecting the data that powers $7 billion in agency deals, hardening environments across media finance and brand operations, and maintaining resilience for systems that underpin sponsorship sales and live-event logistics. The company culture signals collaboration and rapid iteration - CAA has historically been first to build new verticals, from venture funds to technology start-ups, meaning the attack surface keeps expanding.
