Sr Security Specialist - Governance na DISNEY Skip Navigation
The Walt Disney Company. Be you. Be here. Be part of the story.

Be Part of the Story

Sr Security Specialist - Governance

Candidate-se agora mesmo! Candidatar-se depois Job ID 10116575 Local Orlando, Flórida, Estados Unidos Empresa The Walt Disney Company (Corporate) Data da publicação 28/03/2025

Descrição do cargo:

Department Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

  • Secure the Magic by protecting information systems and platforms.
  • Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
  • Strengthen the business through optimizing execution, application, and technology used to protect the Company.
  • Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

The Enterprise Cybersecurity Governance team is responsible for the management of all cybersecurity policy, controls, standards, and guidelines.  We ensure segment and business unit awareness of TWDC security requirements, identify patterns in control effectiveness to help mitigate risk, and monitor industry changes and direction and incorporate as appropriate into policy.

The Sr Security Specialist will play a key role in the Enterprise Cybersecurity governance team, driving the development, implementation, and management of governance programs.  This role focuses on policy development and management, training and awareness, database development, oversight and leadership, and innovation to enhance governance maturity across the organization. 

• Develop, update, and maintain enterprise cybersecurity policies, standards, and controls aligned with frameworks like NIST CSF, ISO 27001, and CIS.

• Partner with technical teams and SMEs to ensure governance initiatives are technically accurate and feasible.

• Facilitate discussions and collaborations with SMEs across infrastructure, cloud, application security, and other technical domains.

• Collaborate with the enterprise risk team to integrate cybersecurity risk into overall risk management strategies

• Develop and track key risk and performance indicators

• Enhance governance processes to ensure compliance with industry standards and regulations.

• Collaborate with teams to map policies and controls to organizational security requirements.

• Provide support for audit and regulatory inquiries related to governance.

• Utilize eGRC platforms (e.g., RSA Archer, ServiceNow, or equivalent) for managing governance processes, tracking compliance, and generating reports.

• Support efforts to integrate policy as code solutions into governance workflows.

• Work closely with technical teams to understand the impact of emerging technologies and incorporate them into governance strategies.

• Communicate governance requirements effectively to both technical and non-technical audiences.

• Provide guidance to teams on adhering to policies and implementing controls.

• Deliver documentation, reporting, and recommendations to stakeholders at all levels.

Must Haves:

• Minimum of 5 years of experience in cybersecurity working with governance, policy development, security engineering and collaboration with technical teams.

• Expertise in cybersecurity technologies and their alignment with governance objectives.

• Proven ability to develop and maintain policies, standards, and controls aligned with industry frameworks.

Must have hands-on experience with eGRC tools such as RSA Archer, ServiceNow, or equivalent.

• Coding or programming experience (e.g., Python, Java, or scripting languages) to support policy automation and policy as code initiatives.

• Strong collaboration skills, with experience working alongside SMEs to integrate technical and governance requirements.

• Excellent verbal and written communication skills, including policy documentation and stakeholder engagement.

Must have experience with cloud security frameworks and technologies (e.g., AWS, Azure, GCP).

• Knowledge of regulatory compliance standards such as GDPR, CCPA, and HIPAA.

Nice to Haves:

• Master’s degree in Cybersecurity, Information Assurance, or a related field.

• Industry certifications such as CISSP, CISM, CRISC, CDPSE, or similar.

• Experience implementing policy as code solutions.

Education:

  • Bachelor’s degree in, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience


Sobre The Walt Disney Company (Corporate):

Na área empresarial da Disney, você pode ver como os negócios por trás das marcas mais poderosas da empresa se reúnem para criar a mais inovadora, conhecida e admirada empresa de entretenimento do mundo. Como integrante de uma equipe empresarial, você trabalhará com líderes de padrão internacional para promover estratégias que mantêm a The Walt Disney Company na vanguarda do entretenimento. Veja e seja visto por outros pensadores inovadores enquanto possibilita que os melhores contadores de histórias do mundo criem momentos inesquecíveis para milhões de famílias de todo o planeta.

Sobre The Walt Disney Company:

A The Walt Disney Company, juntamente com suas subsidiárias e afiliadas, é uma líder diversificada em entretenimento familiar e mídia internacional que inclui três segmentos principais de negócios: Disney Entertainment, ESPN e Disney Experiences. Desde seus primeiros passos como um estúdio de desenho animado na década de 1920 até se tornar o atual nome de destaque na indústria do entretenimento, a Disney orgulhosamente dá continuidade a seu legado de criação de histórias e experiências de padrão internacional para toda a família. As histórias, personagens e experiências da Disney tocam consumidores e visitantes de todas as partes do mundo. Com operações em mais de 40 países, nossos funcionários e colaboradores trabalham juntos para criar experiências de entretenimento adoradas por todos.

Esta vaga é oferecida junto à Disney Worldwide Services, Inc., que é parte de um segmento de negócios que chamamos de The Walt Disney Company (Corporate).

Disney Worldwide Services, Inc. é um empregador de oportunidades iguais. Os candidatos serão selecionados para emprego independente de raça, religião, cor, sexo, orientação sexual, gênero, identidade de gênero, expressão de gênero, nacionalidade, ancestralidade, idade, estado civil, status militar ou de veterano, quadro clínico, informações genéticas ou deficiência, ou qualquer outro motivo proibido por lei federal, estadual ou local. A Disney defende um ambiente de negócios em que ideias e decisões de todas as pessoas nos ajudam a crescer, inovar, criar as melhores histórias e ser relevantes em um mundo em constante evolução.

Candidate-se agora mesmo! Candidatar-se depois

Acompanhe nossas vagas

Inscreva-se para receber notificações sobre novas vagas e informações sobre a empresa com base em suas preferências.

Specify LocationsSelecione uma categoria de emprego da lista de opções. Selecione um local da lista de opções. Por fim, clique em "Adicionar" para criar seu alerta de emprego.