Studio Cybersecurity Risk Analyst
Detalles del empleo:
At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:
- Secure the Magic by protecting information systems and platforms.
- Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
- Strengthen the business through optimizing execution, application, and technology used to protect the Company.
- Innovate by investing in core capabilities to enhance operational efficiency.
We are defenders of the magic, waging an epic battle to safeguard our franchises, protect our people, and ensure the world’s most admired entertainment company is not disrupted by cybersecurity threats. We are partners in protecting Disney’s highly respected portfolio including Marvel Studios, Pixar Animation Studios, Lucasfilm, Disney Live Action Films, Walt Disney Animation Studios, Searchlight Pictures, and 20th Century Studios.
The Studios Cybersecurity team are seeking a Cybersecurity Risk Analyst, who will be an exceptional addition to our team. As a Cybersecurity Risk Analyst, you will be responsible for validating, assessing, and mitigating potential security threats by partnering with our technology partners to develop and implement configuration and controls, ensuring the protection of sensitive data, systems, and infrastructure. This is a technical role with a focus on analyzing Cyber Risk and assessments over the technologies we support. This role will work closely with the Studios Cybersecurity team, Content Security, and application developers, engineering partners on key initiatives to meet Risk and Compliance requirements over TWDC Information Security Policies, Content Protection standards, Security Configuration Standards, and applicable regulatory requirements. This role will be partnering with the Cybersecurity service owners, Engineering, Application Developers, infrastructure teams, TWDC Global Information Security, and various Studio partners through control assessments, solutions architect, remediation requirements, risk management, and interfacing with the key stakeholders to mature our overall security posture.
Responsibilities of Role:
- Analyze assessment outcomes to identify potential security threats and vulnerabilities across all organizational systems and operations.
- Partner with stakeholders to remediate processes to address issues identified via application assessments, audit assessments, key financial application reviews, access control reviews, internal or external audits and/or other assessments.
- Assess the security posture of third-party vendors and manage security risks associated with outsourced services.
- Consult and apply relevant security regulations, TWDC information security policies, security configuration standards, and compliance standards.
- Track performance reporting related to risk and internal controls effectiveness to management.
- Work with engineering and development teams to prioritize remediations to reduce or mitigate security risks timely.
- Assist in the secure design and analysis of on-premises and cloud-based infrastructure and applications.
- Facilitate SDLC best practices through ensuring onboarding for SAST and SCA testing for high impact applications.
- Provide support for continuous improvement initiatives to mitigate/manage risks.
- Partner with functional business areas to analyze and determine the effect to internal control systems for new information technology implementations and proposed process improvement changes.
- Be a key partner and contributor to the implementation of enterprise technology and tools, such as a GRC, to support the effective and efficient execution of risk management processes, including automation of processes, where possible.
Must Haves (Years of Experience, languages, programs, tools, etc.):
- 3 years of applied work experience in cybersecurity programs, audits, assessments, risk, remediation, or cybersecurity compliance
- Deep understanding of cybersecurity principles and best practices
- Expertise in risk assessment methodologies and frameworks (e.g., NIST RMF)
- Knowledge of security best practices over public cloud such as AWS, Azure and GCP.
- Proven ability to analyze and assess complicated application architectures and workflows to identify risk.
- Familiarity with identity and access management integrations such as Active Directory, Okta, Auth0, SAML, OIDC).
- Knowledge of RESTful web services (client–server application).
- Familiarity with CI/CD principals, tools and services.
- Experience with one or more programming or scripting languages – i.e PowerShell, Python, C#, VB, VBA, Ruby, NodeJS, SQL, etc
- Strong analytical and problem-solving skills
- Excellent communication and presentation skills to convey complex security concepts to non-technical audiences
- Experience with security tools and technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM)
- History of on-time, on-budget delivery of strategic deliverables
- Highly organized and efficient. Proven ability to manage multiple projects at a given time.
Education:
- Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience
- Relevant security certifications (e.g., CISSP, CISA, CISM)
#DISNEYTECH
#LI-AF2
The hiring range for this position in Glendale, CA is $95,300 - $127,800 per year, in NYC, NY and Seattle, WA, $99,900 - $133,900 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered
Acerca de The Walt Disney Company (Corporate):
En el área Corporativa de Disney, podrá ver cómo los negocios detrás de las marcas más influyentes de la compañía se juntan para crear la empresa de entretenimiento más innovadora, trascendente y admirada del mundo. Como miembro del equipo corporativo, trabajará con líderes de primer nivel para crear estrategias que mantengan a The Walt Disney Company en la vanguardia del entretenimiento. Trabaje junto a personas con ideas innovadoras como usted y aprenda de ellas a medida que empoderan a los mejores creadores de historias para que generen recuerdos para millones de familias en todo el mundo.
Acerca de The Walt Disney Company:
The Walt Disney Company, junto con sus subsidiarias y afiliadas, es una empresa internacional diversificada líder en entretenimiento familiar y medios de comunicación que incluye tres segmentos comerciales principales: Disney Entertainment, ESPN y Disney Experiences. Desde sus humildes comienzos como estudio de dibujos animados en la década de 1920 hasta su reconocido nombre en la industria del entretenimiento en la actualidad, Disney continúa con orgullo su legado de crear historias y experiencias de clase mundial para toda la familia. Las historias, los personajes y las experiencias de Disney llegan a consumidores e invitados de todos los rincones del mundo. Con operaciones en más de 40 países, nuestros empleados y miembros del elenco trabajan juntos para crear experiencias de entretenimiento que sean apreciadas a nivel local y global.
Este puesto es en Disney Worldwide Services, Inc., que forma parte de una empresa comercial que denominamos The Walt Disney Company (Corporate).
Disney Worldwide Services, Inc. es un empleador que ofrece igualdad de oportunidades. Los solicitantes recibirán consideración para el empleo independientemente de su raza, religión, color, sexo, orientación sexual, género, identidad de género, expresión de género, nacionalidad, ascendencia, edad, estado civil, condición de militar o veterano, afección médica, información genética o discapacidad, o cualquier otro fundamento prohibido por la ley federal, estatal o local. Disney defiende un entorno empresarial donde las ideas y decisiones de todas las personas nos ayudan a crecer, innovar, crear las mejores historias y ser relevantes en un mundo en constante evolución.
ADAPTACIÓN POR DISCAPACIDAD PARA SOLICITUDES DE EMPLEO
The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.
¿Tiene problemas técnicos? Consulte las preguntas frecuentes para obtener ayuda.
Proceso de contratación
-
¿Dónde comienza tu cuento?
Explora Disney Careers y el blog Life at Disney para conocer las increíbles oportunidades que esperan a ser descubiertas en The Walt Disney Company.
-
Formar parte del cuento
Hay muchas marcas y negocios diferentes para explorar. Una vez que hayas encontrado la oportunidad adecuada para ti, da el próximo paso completando su solicitud.
-
El próximo capítulo
Una vez que hayas presentado la solicitud, recibirás un correo electrónico que te permitirá acceder al panel de candidatos. Crea tu información de inicio de sesión y asegúrate de revisar el panel con frecuencia para ver el progreso de tu aplicación.
Explora esta ubicación Glendale, CA
La ciudad del condado de Los Ángeles alberga auténtica comida del Medio Oriente, cultura y su propio “Paseo de la Fama”.
Empleos relacionados
- Sr Product Mgr II Commerce Product Insights Disney Entertainment 10100134 Seattle, Washington / Santa Mónica, California / San Francisco, California / Nueva York, Nueva York Presentar una solicitud
- Product Manager II Disney Entertainment 10117817 Nueva York, Nueva York / Santa Mónica, California / San Francisco, California / Seattle, Washington Presentar una solicitud
- Lead Software Engineer - Identity Engineering Disney Entertainment 10105907 Glendale, California / Bristol, Connecticut / Burbank, California / San Francisco, California / Nueva York, Nueva York / Seattle, Washington Presentar una solicitud
NUESTRA CULTURA
Contenidos relacionados
-
-
-
-
Prestations Nuestros beneficios
-
-
-
Oportunidades profesionales Historias de empleados Disney Cruise Line cast delivers magic in The Bahamas
-
Historias de empleados Blog La vida en Disney
-
-
-
-
-
-
-
-
Desarrollo profesional Recursos para candidatos
-
Estudiantes y Graduados Recientes Disney International Programs
-
Historias de empleados From Shore to Sea: Simon, Manager, Fleet Operations Training
-
Oportunidades profesionales Desarrollo profesional Diversidad, equidad e inclusión Cultura y valores Historias de empleados Estudiantes y Graduados Recientes Entradas del blog "Vida en Disney LATAM"
-
Desarrollo profesional Historias de empleados Disney Cruise Line’s leadership team in The Bahamas on growth, building careers, and making magic
-
Historias de empleados Celebrating Tonie Rose, first woman at Disney Cruise Line to lead a pool deck crew
-
Recursos del trabajo Prestations Benefits - Disney Cruise Line Island Roles
-
Recursos del trabajo Prestations Benefits - Disney Cruise Line Shipboard Roles
-
Recursos del trabajo Prestations Benefits - Disney Cruise Line Shoreside Roles
-
-
Recursos del trabajo Frequently Asked Questions - Disney Cruise Line Island Roles
-
Recursos del trabajo Frequently Asked Questions - Disney Cruise Line Shipboard Roles
-
Recursos del trabajo Frequently Asked Questions - Disney Cruise Line Shoreside Roles
-
Recursos del trabajo Proceso de contratación Disney Cruise Line Procurement Allies
-
-
-
-
-
-
-
Historias de empleados Trabajo e innovación Convertir Datos en Soluciones de Negocios en América Latina
-
Estudiantes y Graduados Recientes Mexico Internships
-
Líderes ejecutivos
Nuestros altos ejecutivos aportan una tremenda experiencia, pensamiento visionario y un compromiso compartido con la excelencia, la creatividad y la innovación en el funcionamiento diario de la empresa.
Obtén más información -
Diversidad, equidad e inclusión
En Disney, nos comprometemos a crear un mundo mejor. Un mundo de pertenencia donde cada persona se sienta vista, escuchada y comprendida. Un mundo lleno de esperanza y promesa.
Obtén más información
Registrarse para recibir alertas de trabajo
Entérese de las últimas ofertas de trabajo a medida que se publiquen.
COMPARTIR
Los enlaces se abren en pestañas nuevas.