Manager, Studios Cybersecurity Risk and Product Security
Descrição do cargo:
At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:
Secure the Magic by protecting information systems and platforms.
Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
Strengthen the business through optimizing execution, application, and technology used to protect the Company.
Innovate by investing in core capabilities to enhance operational efficiency.
We are defenders of the magic, waging an epic battle to safeguard our franchises, protect our people, and ensure the world’s most admired entertainment company is not disrupted by cybersecurity threats. We are partners in protecting Disney’s highly respected portfolio including Marvel Studios, Pixar Animation Studios, Lucasfilm, Disney Live Action Films, Walt Disney Animation Studios, Searchlight Pictures, and 20th Century Studios.
The Studios Cybersecurity team are seeking a Manager, Studios Cybersecurity Risk and Product Security, who will be an exceptional addition to our team. As a Manager, Studios Cybersecurity Risk and Product Security, you will be responsible for identifying, assessing, and mitigating potential security threats by developing and implementing comprehensive security strategies, policies, and procedures, ensuring the protection of sensitive data, systems, and infrastructure. This is a technical role with a focus on Cyber Risk Management and assessment over the technologies we support. This role will work closely with the Studios Cybersecurity team, Content Security, and application developers, engineering partners on key initiatives to meet Risk and Compliance requirements over TWDC Information Security Policies, Content Protection standards, Security Configuration Standards, and applicable regulatory requirements. This role will be partnering with the Cybersecurity service owners, Engineering, Application Developers, infrastructure teams, TWDC Global Information Security, and various Studio partners through control assessments, solutions architect, remediation requirements, risk management, and interfacing with the key stakeholders to mature our overall security posture.
Responsibilities:
- Conduct regular risk assessments to identify potential security threats and vulnerabilities across all organizational systems and operations.
- Develop, implement, and oversee remediation processes to address issues identified via application assessments, audit assessments, key financial application reviews, access control reviews, internal or external audits and/or other assessments.
- Assess the security posture of third-party vendors and manage security risks associated with outsourced services.
- Assist in development of monthly Compliance communications in conjunction with end-user training.
- Ensure adherence to relevant security regulations, TWDC information security policies, security configuration standards, and compliance standards.
- Provide performance reporting related to risk and internal controls effectiveness to key stakeholders.
- Influence prioritization to efficiently and effectively reduce or mitigate security risks timely.
- Provide support for continuous improvement initiatives to mitigate/manage risks while reducing overall compliance costs.
- Partner with functional business areas to analyze and determine the effect to internal control systems for new information technology implementations and proposed process improvement changes.
- Develop and maintain a comprehensive plan to monitor remediation and risk mitigation projects and scope changes, prioritization of scope components.
- Manage, and mature the risk appetite framework for the organization and associated lines of business.
- Be a key partner and contributor to the implementation of enterprise technology and tools, such as a GRC, to support the effective and efficient execution of risk management processes, including automation of processes, where possible.
- You will lead and direct teams of professionals with diverse skills and backgrounds by providing constructive on-the-job feedback/coaching.
Experience and Education
- 8 years of applied work experience in cybersecurity programs, audits, assessments, risk, remediation, or cybersecurity compliance
- Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience
- Relevant security certifications (e.g., CISSP, CISA, CISM)
- Deep understanding of cybersecurity principles and best practices
- Expertise in risk assessment methodologies and frameworks (e.g., NIST RMF)
- Knowledge of security best practices over public cloud such as AWS, Azure and GCP.
- Proven ability to analyze and assess complicated application architectures and workflows to identify risk.
- Familiarity with identity and access management integrations such as Active Directory, Okta, Auth0, SAML, OIDC).
- Knowledge of RESTful web services (client–server application).
- Familiarity with CI/CD principals, tools and services.
- Experience with one or more programming or scripting languages – i.e PowerShell, Python, C#, VB, VBA, Ruby, NodeJS, SQL, etc
- Strong analytical and problem-solving skills
- Excellent communication and presentation skills to convey complex security concepts to non-technical audiences
- Experience with security tools and technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM)
- History of on-time, on-budget delivery of strategic deliverables
- Highly organized and efficient. Proven ability to manage multiple projects at a given time
#DISNEYTECH
#LI-AF2
The hiring range for this position in CA is $138,900 to $186,200 per year. The hiring range for this position in NY and WA is $145,400 to $195,000 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
Sobre o The Walt Disney Company (Corporate):
Na área empresarial da Disney, você pode ver como os negócios por trás das marcas mais poderosas da empresa se reúnem para criar a mais inovadora, conhecida e admirada empresa de entretenimento do mundo. Como integrante de uma equipe empresarial, você trabalhará com líderes de padrão internacional para promover estratégias que mantêm a The Walt Disney Company na vanguarda do entretenimento. Veja e seja visto por outros pensadores inovadores enquanto possibilita que os melhores contadores de histórias do mundo criem momentos inesquecíveis para milhões de famílias de todo o planeta.
Sobre The Walt Disney Company:
A The Walt Disney Company, juntamente com suas subsidiárias e afiliadas, é uma líder diversificada em entretenimento familiar e mídia internacional que inclui três segmentos principais de negócios: Disney Entertainment, ESPN e Disney Experiences. Desde seus primeiros passos como um estúdio de desenho animado na década de 1920 até se tornar o atual nome de destaque na indústria do entretenimento, a Disney orgulhosamente dá continuidade a seu legado de criação de histórias e experiências de padrão internacional para toda a família. As histórias, personagens e experiências da Disney tocam consumidores e visitantes de todas as partes do mundo. Com operações em mais de 40 países, nossos funcionários e colaboradores trabalham juntos para criar experiências de entretenimento adoradas por todos.
Esta vaga é oferecida junto à Disney Worldwide Services, Inc., que é parte de um segmento de negócios que chamamos de The Walt Disney Company (Corporate).
Disney Worldwide Services, Inc. é um empregador de oportunidades iguais. Os candidatos serão selecionados para emprego independente de raça, religião, cor, sexo, orientação sexual, gênero, identidade de gênero, expressão de gênero, nacionalidade, ancestralidade, idade, estado civil, status militar ou de veterano, quadro clínico, informações genéticas ou deficiência, ou qualquer outro motivo proibido por lei federal, estadual ou local. A Disney defende um ambiente de negócios em que ideias e decisões de todas as pessoas nos ajudam a crescer, inovar, criar as melhores histórias e ser relevantes em um mundo em constante evolução.
ACOMODAÇÃO PARA PESSOAS COM NECESSIDADES ESPECIAIS PARA CANDIDATURAS A EMPREGO
The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.
Está tendo problemas técnicos? Consulte as perguntas frequentes para obter ajuda.
Processo de contratação
-
Onde começa a sua história?
Explore o Disney Careers e o blog Life at Disney para saber mais sobre todas as oportunidades incríveis que esperam ser descobertas na The Walt Disney Company.
-
Seja parte da história
Há muitas marcas e empresas diferentes a serem exploradas. Depois de encontrar a oportunidade certa para você, dê o próximo passo preenchendo sua candidatura.
-
O próximo capítulo
Depois de se candidatar, você receberá um e-mail permitindo que acesse o painel do candidato. Crie seu login e lembre-se de verificar seu painel com frequência para ver o progresso de sua candidatura.
Conheça este local Glendale, Califórnia
A cidade do condado de Los Angeles é lar de comida e cultura autênticas do Oriente Médio, além de possuir sua própria “Calçada da Fama”.
Vagas relacionadas
- Sr. Software Engineer, Front-End Disney Entertainment & ESPN Technology 10113640 Nova Iorque, Nova Iorque / Bristol, Coneticute / Glendale, Califórnia Aplicar
- Interaction Designer, Connected Exp The Walt Disney Company (Corporate) 10114113 Seattle, Washington / Glendale, Califórnia Aplicar
- Software Engineer(Front-End) Disney Entertainment & ESPN Technology 10114862 Nova Iorque, Nova Iorque / Santa Mônica, Califórnia / São Francisco, Califórnia / Seattle, Washington Aplicar
NOSSA CULTURA
Conteúdo relacionado
-
-
-
-
Benefícios Nossos benefícios
-
-
-
Oportunidades de carreira Histórias de funcionários Disney Cruise Line cast delivers magic in The Bahamas
-
Histórias de funcionários Blog Life at Disney
-
-
-
-
-
-
-
-
Desenvolvimento de carreira Recursos do candidato
-
Histórias de funcionários From Shore to Sea: Simon, Manager, Fleet Operations Training
-
Desenvolvimento de carreira Histórias de funcionários Disney Cruise Line’s leadership team in The Bahamas on growth, building careers, and making magic
-
Histórias de funcionários Celebrating Tonie Rose, first woman at Disney Cruise Line to lead a pool deck crew
-
Recursos do cargo Benefícios Benefits - Disney Cruise Line Island Roles
-
Recursos do cargo Benefícios Benefits - Disney Cruise Line Shipboard Roles
-
Recursos do cargo Benefícios Benefits - Disney Cruise Line Shoreside Roles
-
-
Recursos do cargo Frequently Asked Questions - Disney Cruise Line Island Roles
-
Recursos do cargo Frequently Asked Questions - Disney Cruise Line Shipboard Roles
-
Recursos do cargo Frequently Asked Questions - Disney Cruise Line Shoreside Roles
-
Recursos do cargo Processo de contratação Disney Cruise Line Procurement Allies
-
-
-
-
-
-
-
Liderança executiva
Nossos executivos seniores trazem enorme experiência, pensamento visionário e um compromisso compartilhado com excelência, criatividade e inovação para a operação cotidiana da empresa.
Saiba mais -
Diversidade, igualdade e inclusão
Na Disney, temos o compromisso de criar um mundo melhor. Um mundo de pertencimento, em que cada pessoa se sinta vista, ouvida e compreendida. Um mundo cheio de esperança e promessa.
Saiba mais
Inscrever-se para receber alertas de vagas
Obtenha as oportunidades de emprego mais recentes assim que se tornarem disponíveis.
COMPARTILHAR
Links abertos em novas guias.