Senior Security & Compliance Specialist

The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Seattle, Burbank, and Orlando.In order to ensure that our services keep The Walt Disney Company (TWDC) secure, we follow an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business and technology. This process includes:Analysis of known and emerging threats to determine risks against TWDC assets

Creation, maintenance, governance and communication of security policies and standards across TWDC

Assessment and audit of compliance against the security policies and standards

Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria

We are looking to add a Sr. Information Security and Compliance Specialist to our team - someone who is focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work.The Sr. Information Security and Compliance Specialist for metrics will partner closely with business and IT leaders, and stakeholders to provide reliable metrics through reporting and management dashboards used for decision-making, operational management, Key Performance Indicator (KPI) reviews, and identifying opportunities for improvement. The cast member is also expected to educate our partners and customers to ensure security and compliance is something that everyone values and supports.Responsibilities:The Sr. Information Security and Compliance Specialist is responsible to:Produce accurate and standardized reporting with key insights to communicate operational performance to leadership teams.

Collaborate with operational areas to develop new dashboards, publish recurring status reports, analyze data, and explore how to better support our stakeholders

Identify gaps and risks that may impact current security and compliance strategy and/or operational targets

Identify gaps and risks that may impact the on-time delivery of new security and compliance strategies

Prepare presentations for senior-management that appropriately communicates data-driven results to executives

Promote and implement the automation of repetitive tasks

Stay informed about information security trends, directions, and technologies in the technology industry.

Basic Qualifications:3+ years of Cyber Security and Risk Metrics

Strong numeracy, analytical, and strategy skills

Demonstrated experience in identifying risk and development of mitigation plans.

Demonstrated problem solving skills with an ability to develop creative alternatives to complex problems, as well as, continuous improvement process skills

Demonstrated proficiency at consolidating data from numerous sources to create presentations for all levels of management and other stakeholders

Demonstrated ability to handle confidential information.

Demonstrated experience in a security program for a large and complex organization.

Strong relationship building, influencing and consultation skills and be able to establish and maintain positive work relationships with peers, management, and key stakeholders.

Demonstrated professional written, verbal, and presentation communications skills.

Demonstrated ability to effectively communicate complex issues, present technical information clearly, and lead through influence to accomplish challenging goals & objectives

Proven ability to work effectively in a fast-paced environment as part of a high performance team.

Preferred Qualifications:Basic knowledge of visualization tools such as Tableau, Power BI, Grafana, etc.

Experience working in a multi-national and multicultural environment

Ability to be flexible with work schedule and travel requirements

Strong research skills

Required Education:Bachelor's degree or equivalent experience in Computer Science, Management Information Systems, data analytics, or related field

One or more of the following Certifications: CISSP, CISA, ITIL, etc.

Preferred Education:Master’s degree or equivalent

The Team:At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.Location: Lake Buena Vista,FloridaJob Posting Company:The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, email Candidate.Accommodations@Disney.com with your request. This email address is not for general employment inquiries or correspondence. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.