The Walt Disney Company Staff Security Specialist - Governance in Celebration, Florida
At Disney, we‘re storytellers. We make the impossible, possible. We do this through utilizing and developing cutting-edge technology and pushing the envelope to bring stories to life through our movies, products, interactive games, parks and resorts, and media networks. Now is your chance to join our talented team that delivers unparalleled creative content to audiences around the world.
The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Seattle, Burbank, and Orlando.
In order to ensure that our services keep TWDC secure, we follow an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business and technology. This process includes:
Analysis of known and emerging threats to determine risks against TWDC assets
Creation, maintenance, governance and communication of security policies and standards across TWDC
Assessment and audit of compliance against the security policies and standards
Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria
We look add people to our team who are focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work.
Information Security Governance ensures that enterprise security is driven by clear policies, measurable standards, and comprehensive guidelines. This achieved through strategic dialog and decision making, evolving TWDC security requirements, and consulting with TWDC segments and business units.
Providing risk management consultation, using in-depth knowledge of TWDC policies and standards, to ensure risk management framework and principles are properly applied across the company
Providing governance consultation, using in-depth knowledge of TWDC policies and standards, to ensure segments and business units understand the intent of Company security requirements
Providing internal audit consultation, using in-depth knowledge of TWDC policies and standards, to ensure audit findings are reflective of Company security requirements in terms of effectiveness and design
Researching technology trends to determine new security requirements
Reviewing and presenting reports and position papers to peers, management, and senior levels of leadership within the organization and segments
Basic Qualifications :
7+ years in IT with 4-6 years in an information security role
3+ years of information security audit experience
Extensive knowledge of information security principles and functions
Extensive knowledge and experience with diverse IT architectures and enterprise IT data centers, external hosted services and cloud computing environments. Knowledge and experience with physical and virtual server configurations and implementations.
Extensive knowledge of NIST Special Publication 800-53 security and privacy controls, the NIST Cybersecurity Framework and other information security and privacy laws and regulations.
One of the following certifications: CISSP, CISM, CISA PCIP, ITIL V3 Foundations
Required Education :
- BA/BS in business or computer science or appropriate work experience
Job ID: 592012BR
Job Posting Company: The Walt Disney Company (Corporate)