Sr. Manager, Security Governance
The Walt Disney CompanyAbout the role
Job Posting Title:
Sr. Manager, Security GovernanceReq ID:
10088331Job Description:
Who We Are
At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a dedication to crafting and delivering unforgettable experiences — and we’re constantly looking for new ways to improve these exciting experiences.
The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
We Are Hiring!
We are seeking a Sr. Manager, Security Governance to join the Global Information Security (GIS) group. Our group provides services to protect the value and use of Disney’s information through collaboration, standardization, compliance, and education across The Walt Disney Company.
Our Main Focus Areas:
Reduce the risk of both accidental and malicious data disclosure
Identify, monitor, engage with complete inventory of information
Establish appropriate policies and procedures to be followed
Educate user community to minimize risk
What You Will Do
Information Security Governance ensures that enterprise security is driven by clear policies, measurable standards, and comprehensive guidelines.
Responsibilities of Role:
Review industry information security best practices and work across the company to implement in the form of policy
Develop and deliver governance reporting to advise leadership on alignment to policy
Lead a team that provides governance consultation, using in-depth knowledge of TWDC policies and standards, to ensure segments and business units understand the intent of Company security requirements
Provides internal audit consultation, using in-depth knowledge of policies and standards, to ensure audit findings are reflective of our security requirements in terms of efficiency and design
Lead an effort to automatically incorporate policy as standard in all technology design
Lead annual NIST assessments and provide reporting to the CISO
Must Have
Minimum of 10+ years of related work experience
7+ years of information audit experience
Experience leading governance, risk or compliance teams
Superb communication, problem-solving and decision-making skills
Knowledge in work management and GRC solutions; Archer, Jira, Confluence
Collaborate across multiple departments as well as with senior leadership.
Solid understanding of automated policy implementation and cloud security posture management
Experience delivering security governance programs at scale
Working knowledge of CIS-18, NIST for policy development and alignment
Experience setting governance strategy, developing and reporting on KPI, KRI, OKR metrics
Nice To Have
Experience with information security audits, including ISO27001, NIST, SOX, PCI-DSS
Solid understanding of automated policy implementation and cloud security posture management
Knowledge of the primary cloud providers technology solutions
One of the following certifications: CISSP, CISM, CISA PCIP, ITIL V3 Foundations
Ability to organize work using Kanban methodologies
Education
Bachelor’s degree and/or equivalent work experience
#DISNEYTECH
#LI-JP4
The hiring range for this position is $142,106.00 to $209,660.00 per year, which factors in various geographic regions. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.Job Posting Segment:
Enterprise TechnologyJob Posting Primary Business:
Corporate Global Information SecuriApply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s