Outscal Logooutscal logo

Senior Security Specialist, Third-Party Risk Management

1 Hour ago • 5-5 Years • Cyber Security • $112,600 PA - $158,200 PA

Job Summary

Job Description

The Senior Security Specialist, Third-Party Risk Management at Disney's Global Information Security (GIS) Compliance team manages security compliance assessments, including scheduling, planning, execution, and measuring compliance with external requirements and internal policies. Responsibilities include identifying key control attributes for testing, conducting walkthroughs, obtaining artifacts, presenting findings, documenting results, advising partners on risks, performing impact analyses, designing continuous control monitoring, managing inventories, and staying abreast of compliance trends. The role requires strong analytical, problem-solving, and communication skills.
Must have:
  • 5+ years IT audit/security/compliance experience
  • 5+ years Third-Party Risk Management experience
  • Experience leading audits/assessments in complex environments
  • Experience interpreting and auditing external security regulations
  • Solid organizational, analytical, and problem-solving skills
  • Excellent written and verbal communication skills
  • Security certification (CISSP, CISA, GSEC, or comparable)
Good to have:
  • Master's degree in relevant field
Perks:
  • Bonus
  • Long-term incentive units
  • Full range of medical, financial, and other benefits

Job Details

Job Summary:

 

Department Description 

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences. 

 

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence. 

 

The Global Information Security (GIS) group provides services to protect the value and use of Disney’s information through collaboration, standardization, enforcement, and education across The Walt Disney Company.  The main focus areas of this group are: 

  • Reduce the risk of both accidental and malicious data disclosure 

  • Identify, monitor, engage with complete inventory of information 

  • Establish appropriate policies and procedures to be followed 

  • Educate user community to minimize risk 

 

Team Description: 

The GIS Compliance team oversees ongoing security programs to evaluate the health of TWDC’s control environment. These programs include external audits, internal control validation, third party assessments, and ongoing consulting. The department is responsible for understanding and interpreting regulated controls and assessment requirements (Payment Card Industry, SOX, General Data Protection Regulations, Third Party Assessment) for TWDC. 

 

Responsibilities of Role: 

  • Manage security compliance assessment scheduling/planning, scoping, and execution 

  • Measure security compliance with both external requirements and internal policies and standards 

  • Identify and justify key control attributes for testing 

  • Conduct informational walkthroughs to clarify processes and architectures 

  • Obtain artifacts to support the assessment of security controls and procedures, using a robust “trust but verify” approach.  

  • Proactively send and follow up on all requests 

  • Present assessment findings and recommendations to management, concluding on the effectiveness and efficiency of control mechanisms 

  • Document assessment results and cogent control process narratives in workpapers 

  • Advise IT, Segment, and business partners on security-related risks and control weaknesses. For identified security gaps, contribute to performing business impact analyses and determining appropriate remedies that minimize security threats.  

  • Articulate the elements of effective and sustainable control design to IT and business partners.  

  • Design and implement continuous control monitoring mechanisms, collaborating with IT, Segment, and business partners to source and interpret data that reflects the current state of the control environment for TWDC 

  • For targeted controls and systems, facilitate the collection of control attestations and questionnaires 

  • Manage inventories and tracking of remediation efforts and compensating controls. 

  • Stay abreast of compliance and assessment trends within TWDC, at suppliers, and from legislators and regulatory bodies 

Must Haves (Years of Experience, languages, programs, tools, etc.) 

  • Must have 5+ years of IT audit, or IT security and/or compliance experience 

  • Prior experience working within a global media, entertainment organization or fortune 100 company 

  • Must have 5+ years Third-Party Risk Management experience

  • Proven experience leading audits/assessments with complex environments  

  • Solid experience interpreting and auditing external security regulations  

  • Ability to grasp underlying technology stacks and document end-to-end service delivery flows 

  • Good organizational, analytical, and problem-solving skills - balancing multiple priorities under tight deadlines 

  • Excellent written, verbal, and visual communication for partners (internal & external) in all roles and levels  

  • Ability to establish credibility and coordinate partnerships across segments 

  • Security certification (CISSP, CISA, GSEC) or comparable certification 

Nice To Haves (see above): 

  • Master’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, 

Education: 

  • Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience 


The hiring range for this position in Burbank CA is $112,600 to $151,000 per year. and in New York NY & Seattle WA is $118,000 to $158,200 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Similar Jobs

PlayStation Global - Manager, Sales and Revenue Forecasting

PlayStation Global

London, England, United Kingdom (Remote)
1 Month ago
Supercell - Regional Marketing, Korea

Supercell

Seoul, South Korea (On-Site)
5 Months ago
ByteDance - Software Engineer, Model Inference

ByteDance

Seattle, Washington, United States (On-Site)
1 Hour ago
PwC - IN_Director_IA_Internal Audit_Advisory_Mumbai

PwC

Mumbai, Maharashtra, India (On-Site)
5 Months ago
WongDoody - (UX) USER EXPERIENCE DESIGNER, SNR.

WongDoody

Australia (On-Site)
6 Months ago
Assystems - Informaticien Cybersécurité Réseau Industriel H/F

Assystems

Cherbourg-en-Cotentin, Normandy, France (On-Site)
4 Months ago
Tesla - EMEA Security Systems Engineer

Tesla

Berlin, Berlin, Germany (On-Site)
1 Month ago
Granicus - Cloud Network Security Engineer

Granicus

Bengaluru, Karnataka, India (Hybrid)
5 Months ago
Axinous - Senior Customer Success Engineer

Axinous

Germany (Remote)
2 Months ago
Canva - Security Engineering Director - Detection & Response - Remote across ANZ

Canva

Wellington, Wellington, New Zealand (Remote)
4 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

PlayStation Global - Manager, Analytics Engineering

PlayStation Global

London, England, United Kingdom (On-Site)
4 Months ago
Zones - Inside Sales Representative

Zones

Noida, Uttar Pradesh, India (On-Site)
4 Months ago
Hitachi - Power platform developer

Hitachi

Bengaluru, Karnataka, India (On-Site)
5 Months ago
The Walt Disney Company - Director, Machine Learning Engineering

The Walt Disney Company

Washington, United States (On-Site)
19 Hours ago
Google - Senior Software Engineer, Infrastructure, Core

Google

Sunnyvale, California, United States (On-Site)
3 Months ago
Definitive Healthcare - Senior Data Scientist

Definitive Healthcare

Bengaluru, Karnataka, India (On-Site)
3 Months ago
Zoox - Senior Strategic Sourcing Manager (Direct Procurement)

Zoox

Foster City, California, United States (Hybrid)
5 Months ago
Tesla - Vehicle Preparer / Vehicle Reception Specialist

Tesla

Baden-Württemberg, Germany (On-Site)
1 Month ago
Playtika - People Analyst

Playtika

Israel (On-Site)
4 Months ago
ByteDance - Wearable Electrical Engineer / Architect

ByteDance

San Jose, California, United States (On-Site)
1 Hour ago

Get notifed when new similar jobs are uploaded

Jobs in New York, New York, United States

Next Level Business Services - IOS Developer  (Full Time)

Next Level Business Services

Redmond, Washington, United States (On-Site)
5 Months ago
Next Level Business Services - Data Architect

Next Level Business Services

Sunnyvale, California, United States (On-Site)
4 Months ago
Everyday Health Group - Senior Software Engineer, Backend - Lose It!

Everyday Health Group

United States (On-Site)
4 Months ago
Meta - Network Production Engineer, Network Infrastructure

Meta

Bellevue, Washington, United States (On-Site)
4 Months ago
Sphere Entertainment Co - Assistant Project Manager

Sphere Entertainment Co

United States (Remote)
3 Hours ago
Axinous - Account Executive, Enterprise - Maryland/Virginia

Axinous

Maryland, United States (Remote)
1 Week ago
Meta - Research Scientist Intern, Smart Glasses in Wearables AI (PhD)

Meta

New York, New York, United States (On-Site)
4 Months ago
Next Level Business Services - IOS Software Design Engineer / IOS Project Manager

Next Level Business Services

Redmond, Washington, United States (On-Site)
5 Months ago
Epic Games - Backend Engineer

Epic Games

Cary, North Carolina, United States (On-Site)
2 Months ago
undefined - Principal Player Combat & Gameplay Designer

Bellevue, Washington, United States (On-Site)
5 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

ION - Markets Platform Security Engineer - US

ION

Toronto, Ontario, Canada (On-Site)
5 Months ago
ION - Junior Cyber Security Analyst

ION

Pisa, Tuscany, Italy (Hybrid)
5 Months ago
The Walt Disney Company - Senior Manager, Global Security Operation JP&KR

The Walt Disney Company

Minato City, Tokyo, Japan (On-Site)
19 Hours ago
ION - Senior Security Architect

ION

London, England, United Kingdom (On-Site)
5 Months ago
PwC - IN-Associate_Salesforce _ Enterprise Apps SFDC_Advisory_ Pan India

PwC

Mumbai, Maharashtra, India (On-Site)
3 Months ago
King - Gaming Cloud Security Engineer

King

Barcelona, Catalonia, Spain (On-Site)
20 Hours ago
Axinous - Technical Customer Success Manager

Axinous

Hong Kong (Remote)
1 Month ago
PwC - Cyber Security Architect

PwC

Amsterdam, North Holland, Netherlands (On-Site)
2 Months ago
PwC - Consultoría I Consultor Senior Ciberseguridad OT

PwC

Madrid, Community Of Madrid, Spain (On-Site)
5 Months ago
Trend Micro - Embedded Software Engineer (C/C++)

Trend Micro

Manila, Metro Manila, Philippines (On-Site)
16 Years ago

Get notifed when new similar jobs are uploaded

About The Company

From classic animated features and exhilarating theme park attractions to cutting edge sports coverage, and the hottest shows on television, The Walt Disney Company has been making magic since 1923, creating unforgettable stories that connect with audiences around the world. And we’re just getting started!

The key to our success…. The Cast, Crew, Imagineers and Employees who honor Disney’s rich legacy by stretching the bounds of imagination to create the never-before-seen, bringing unparalleled entertainment experiences to people of all ages. Begin a career that delivers unparalleled creative content and experiences to audiences around the world and just imagine the stories you could be part of…

What is #LifeAtDisney like? It’s a series of magical moments with cast members and employees developing and telling our stories in the most innovative ways. Whether it’s a day spent as a Disney VoluntEAR, or celebrating the release of a new interactive experience, retail product or movie, our days are filled with the knowledge that we are creating entertainment experiences the whole family can enjoy. Follow @DisneyCareers on Facebook, Twitter and Instagram for a peek behind-the-curtain, and discover how you could connect to a world of stories with Disney!

São Paulo, State Of São Paulo, Brazil (On-Site)

Hong Kong (On-Site)

Île-de-France, France (On-Site)

Île-de-France, France (On-Site)

Île-de-France, France (On-Site)

Île-de-France, France (On-Site)

Serris, Île-de-France, France (On-Site)

Île-de-France, France (On-Site)

Serris, Île-de-France, France (On-Site)

Île-de-France, France (On-Site)

View All Jobs

Get notified when new jobs are added by The Walt Disney Company

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug