Security & Governance Analyst - Identity & Access Management

Who We Are:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Identity Cyber Process, Governance & Administration team is one of the primary functional teams under the enterprise-supporting Identity and Access Management (IAM) organization within Enterprise Technology. This team is accountable and essential for the security and governance of the core identity services across the organization, including Authentication, Authorization, Access & Identity, Directory Services, Secrets Management, and Privileged Access Management (PAM). Specifically, this team’s mission is to define, deliver, enforce and administer policies, standards, controls, platforms, and security practices for workforce identity across The Walt Disney Company (TWDC) to reduce security risk and enable IAM service effectiveness.

What You Will Do:

We are hiring a Security & Governance Analyst, IAM, who will be responsible for ongoing governance and administrative activities in support of our enterprise Identity and Access services.

This role will serve as a critical contributor to maintaining the ongoing program activities, including but not limited to, the regular planning, execution, and documentation of user access reviews as part of offering this service leveraging our enterprise identity governance and administration (IGA) solution. This includes quarterly processes, as well as pre- and post- activities to ensure proper and secure usage of our services. These processes involve end user trainings, broader service communications, data validation activities, end user support, process documentation, tracking and reporting, etc. In many cases, the successful completion of this work is in direct support to regulatory compliance activities for our customers.

Responsibilities:

• Driving and managing all aspects of the User Access Review (UAR) process for the enterprise-supported access program

• Planning and executing quarterly UARs for all systems participating in this program

• Identifying and engaging with participating system partners across the company to ensure readiness and engagement for regular UARs

• Producing and maintaining data reporting, analysis, dashboards and scorecards in support of overall UAR health, execution, and closure

• Understanding and ensuring that TWDC compliance requirements are satisfied as they relate to our service

• Ensuring that training materials for service participants/customers are kept up-to-date

• Managing training sessions for reviewers during the execution of UARs

• Assisting the Security & Governance Leads in other security and governance-focused activities as necessary for the secure delivery of our IAM services

Must Have:

• Minimum of 3 years’ experience with running governance and administration programs in support of enterprise-wide services, IT governance, risk management, and regulatory compliance

• Experience working with common industry IGA solutions (e.g., SailPoint, Saviynt)

• Strong communication skills to be leveraged during the formulation of trainings, end user support, and broad service-level communications

• Demonstrable experience in driving forward strategic enterprise-wide programs, reporting to executive stakeholders, and orchestrating adoption of high impact application teams

• Proven ability to lead, scale, guide, and support contributing team members for an enterprise-level service

Nice-to-Have:

• CISA, CISSP, or equivalent

Education:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

#DISNEYTECH

The hiring range for this position in Burbank, California is $95,300 - $127,800 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.