Cybersecurity Awareness Education Lead

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.
• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance operational efficiency.

Responsibilities of Role:

The first line of defense against cyber threats comes down to each and every individual employee at TWDC. As the Cybersecurity Awareness Education Lead, you will play a vital role in educating the Company on cybersecurity priorities and initiatives. This role will lead the development and maintenance of a robust cybersecurity training & awareness program that spans general and business/role specific cybersecurity best practices as it relates to the unique businesses of TWDC.

• Program Development
• Design and develop cybersecurity training materials aligned to the organization’s security policies, goals, regulatory and business requirements
• Content creation and customization through various mediums (training modules, presentations, reference guides, etc.)
• Collaborate with business and employee communications partners to strategize ongoing cybersecurity awareness campaigns and educational material
• Distribute training materials through various delivery means to best suit intended audience and target content awareness based on urgency (in-person training, webinars, training modules, etc.), working in collaboration with learning and employee communications partners
• Establish an awareness community of practice resource to provide all employees with access to training materials
• Awareness Responsibilities
• Lead Cybersecurity Awareness Month strategy
• Maintain GIS internal website
• Support Incident Response and Phishing Simulation campaigns with awareness and response communications
• Work closely with enterprise employee communications on internal marketing of all campaigns
• Reporting & Metrics
• Monitor and report on training compliance and overall program effectiveness
• Regularly assess effectiveness and relevance of training material for updates
• Maintain current understanding of cybersecurity trends, regulations, and technologies to continuously improve the training & awareness program

Must Haves:

• BA/BS degree
• 5+ years of experience developing educational materials and programs
• Strong interpersonal skills with the ability to work with teams cross-functionally
• Effective communication skills for explaining concepts to technical and non-technical audiences including developers and tech operators with a demonstrated ability to take highly technical processes and make them easily understandable by the general employee population
• Demonstrated ability to manage multiple priorities with strong organizational and time management skills
• Project Management experience

Nice to Haves:

• Expertise in cybersecurity awareness and education with a deep understanding in technical security processes.