COMPLETE Security Specialist, Risk Management - Orlando, FL, USA

Job Posting Title:

Security Specialist, Risk Management

Req ID:

10053936

Job Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.

The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Burbank, New York, Orlando, Seattle, and Bristol.

In order to ensure that our services keep TWDC secure, we follow an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business and technology. This process includes:

• Analysis of known and emerging threats to identify risks against TWDC assets

• Creation, maintenance, governance and communication of security policies and standards across TWDC

• Assessment and audit of compliance against the security policies and standards

• Assurance that TWDC assets are effectively handled and monitored to meet TWDC security criteria

We are looking to add people to our team who are focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work.

GIS supports all of Disney’s segments which includes Disney Entertainment and ESPN (DEE). DEE brings together the Company’s best-in-class product, technology, and commercialization teams together into one global organization. DEE is responsible for all distribution, network and engineering operations, sales, advertising, data, and certain key technology functions worldwide for the Company’s content engines. DEE also runs operations of the Company’s streaming services including Disney+, Hulu, ESPN+, Disney+ Hotstar and Star; as well as all domestic broadcast and cable television network. Security professionals supporting DEE will be exposed to industry leading technology that provide our guests with world class and highly secured services.

What You Will Do:

• Complete risk assessments for new and existing vendors, applications, and projects. Key tasks include:

  • Planning and leading kickoff meetings

  • Identifying inherent and residual risk

  • Communicating necessary security review requirements to peers

  • Handling identified issues through their entire lifecycle

• Help define, implement, and execute key programs within the DEE Cyber Risk Management team that include the following:

  • Vendor risk

  • Application assessment

  • Cyber risk framework

  • Project risk assessment

• Monitor and report upon key enterprise IT security risks

• Handle and communicate the status of assigned projects and/or tasks

• Identify and help implement areas for improvement (e.g., automation) to increase visibility and coverage; and to further reduce risk

• Be a trusted advisor to our business partners

• Drive continuous process improvement

• Remain current with changes in policy, regulations, and technology to understand, communicate, and handle their associated risks to Disney

• Support Governance, Risk, and Compliance (GRC) enterprise tool operations, implementation, and enhancements

• Interprets internal or external business strategies, opportunities, and trends and recommends best practices

• Leadership in functional teams or projects as needed

What You Will Bring:

• 2+ years experience

• Able to lead day-to-day operational aspects of assigned projects and/or tasks, with minimal direction once deliverables have been agreed upon

• Able to solve complex problems and take a broad perspective to identify innovative solutions

• Able to switch from complex to routine tasks when required

• Eager to research and understand new technologies and products

• Collaborates effectively with a variety of personalities and work styles

• Able to influence others in deciding the best course of action in regards to security decisions

• Must have situational awareness and adjust conversations and approach based on the risk tolerances of our business partners and peers

• Able to prioritize competing demands, scope large efforts and negotiate timelines

• Able to understand how different parts of the business impact each other and to use that knowledge to make data-driven decisions

• Able to apply published methodologies and enforce program standards

• Must have clear and concise business writing and communication skills

• Able to proactively provide status and concerns that may impact the execution of assigned project and / or tasks

• Good attention to detail

Education:

• Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, or relevant field or equivalent work experience

• CISSP, CISA, CISM, or GSEC certification or relevant work experience

#DISNEYTECH

The hiring range for this position in Glendale, CA is $93,398 - $125,290 per year and in New York, New York is $97,908 - $131,340 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.    

Job Posting Segment:

Enterprise Technology

Job Posting Primary Business:

Global Information Security

Primary Job Posting Category:

Security Governance

Employment Type:

Full time

Primary City, State, Region, Postal Code:

Orlando, FL, USA

Alternate City, State, Region, Postal Code:

USA - CA - 1200 Grand Central Ave, USA - NY - 77 West 66th St

Date Posted:

2023-07-17