Senior Security Specialist - Governance

2 Months ago • 5 Years + • Cyber Security

Job Summary

Job Description

The Sr Security Specialist will be a key member of the Enterprise Cybersecurity Governance team, responsible for developing, implementing, and managing governance programs. This involves creating and maintaining cybersecurity policies, standards, and controls aligned with frameworks like NIST CSF and ISO 27001. The role requires collaboration with technical teams, risk management, and stakeholders across the organization to ensure compliance and mitigate risks. Responsibilities include policy development, training, database management, risk indicator tracking, and integrating policy as code solutions. The ideal candidate will have experience with eGRC tools and cloud security frameworks.
Must have:
  • 5+ years cybersecurity experience in governance, policy development, and collaboration with technical teams
  • Expertise in cybersecurity technologies and alignment with governance
  • Develop and maintain policies, standards, and controls aligned with industry frameworks
  • Hands-on experience with eGRC tools (RSA Archer, ServiceNow)
  • Coding experience (Python, Java, or scripting languages)
  • Experience with cloud security frameworks (AWS, Azure, GCP)
  • Knowledge of regulatory compliance standards (GDPR, CCPA, HIPAA)
Good to have:
  • Master's degree in Cybersecurity or related field
  • Industry certifications (CISSP, CISM, CRISC, CDPSE)
  • Experience implementing policy as code solutions

Job Details

Job Summary:

Department Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

  • Secure the Magic by protecting information systems and platforms.
  • Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
  • Strengthen the business through optimizing execution, application, and technology used to protect the Company.
  • Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

The Enterprise Cybersecurity Governance team is responsible for the management of all cybersecurity policy, controls, standards, and guidelines.  We ensure segment and business unit awareness of TWDC security requirements, identify patterns in control effectiveness to help mitigate risk, and monitor industry changes and direction and incorporate as appropriate into policy.

The Sr Security Specialist will play a key role in the Enterprise Cybersecurity governance team, driving the development, implementation, and management of governance programs.  This role focuses on policy development and management, training and awareness, database development, oversight and leadership, and innovation to enhance governance maturity across the organization. 

• Develop, update, and maintain enterprise cybersecurity policies, standards, and controls aligned with frameworks like NIST CSF, ISO 27001, and CIS.

• Partner with technical teams and SMEs to ensure governance initiatives are technically accurate and feasible.

• Facilitate discussions and collaborations with SMEs across infrastructure, cloud, application security, and other technical domains.

• Collaborate with the enterprise risk team to integrate cybersecurity risk into overall risk management strategies

• Develop and track key risk and performance indicators

• Enhance governance processes to ensure compliance with industry standards and regulations.

• Collaborate with teams to map policies and controls to organizational security requirements.

• Provide support for audit and regulatory inquiries related to governance.

• Utilize eGRC platforms (e.g., RSA Archer, ServiceNow, or equivalent) for managing governance processes, tracking compliance, and generating reports.

• Support efforts to integrate policy as code solutions into governance workflows.

• Work closely with technical teams to understand the impact of emerging technologies and incorporate them into governance strategies.

• Communicate governance requirements effectively to both technical and non-technical audiences.

• Provide guidance to teams on adhering to policies and implementing controls.

• Deliver documentation, reporting, and recommendations to stakeholders at all levels.

Must Haves:

• Minimum of 5 years of experience in cybersecurity working with governance, policy development, security engineering and collaboration with technical teams.

• Expertise in cybersecurity technologies and their alignment with governance objectives.

• Proven ability to develop and maintain policies, standards, and controls aligned with industry frameworks.

Must have hands-on experience with eGRC tools such as RSA Archer, ServiceNow, or equivalent.

• Coding or programming experience (e.g., Python, Java, or scripting languages) to support policy automation and policy as code initiatives.

• Strong collaboration skills, with experience working alongside SMEs to integrate technical and governance requirements.

• Excellent verbal and written communication skills, including policy documentation and stakeholder engagement.

Must have experience with cloud security frameworks and technologies (e.g., AWS, Azure, GCP).

• Knowledge of regulatory compliance standards such as GDPR, CCPA, and HIPAA.

Nice to Haves:

• Master’s degree in Cybersecurity, Information Assurance, or a related field.

• Industry certifications such as CISSP, CISM, CRISC, CDPSE, or similar.

• Experience implementing policy as code solutions.

Education:

  • Bachelor’s degree in, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

Similar Jobs

luxsoft - Senior QA Automation Engineer (Java/Python - Selenium)

luxsoft

Houston, Texas, United States (On-Site)
1 Month ago
Google - Partner Engineer, YouTube Shopping

Google

Taipei City, Taiwan (On-Site)
1 Month ago
DEVOTEAM - Data engineer -Apache NIFI

DEVOTEAM

Casablanca, Casablanca-Settat, Morocco (Remote)
7 Months ago
ION - Senior Java Developer - Italy

ION

Rome, Lazio, Italy (On-Site)
7 Months ago
Luxoft - Lead Java Developer (for Trading Application)

Luxoft

Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (Remote)
5 Months ago
PwC - Financial Sector Cyber Security Senior Manager

PwC

Amsterdam, North Holland, Netherlands (On-Site)
4 Months ago
Google - AI Information Security Engineer

Google

Zürich, Zurich, Switzerland (On-Site)
1 Month ago
Google - Customer Engineer Associate II, Security, Google Cloud

Google

Atlanta, Georgia, United States (On-Site)
1 Month ago
GoMotive - Information Security Analyst II

GoMotive

Pakistan (Remote)
2 Months ago
Google - Security Analyst

Google

Hyderabad, Telangana, India (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Evolution - Software Developer in Data Science Team

Evolution

Riga, Latvia (On-Site)
1 Month ago
Blitre Rewards - Back End Engineer - Operations

Blitre Rewards

New York, New York, United States (On-Site)
1 Month ago
Interactive Brokers - Senior Software Engineer

Interactive Brokers

Greenwich, Connecticut, United States (On-Site)
7 Months ago
Meta - Software Engineering Manager, Product Infrastructure

Meta

Burlingame, California, United States (Remote)
6 Months ago
Anthology - Staff Software Engineer

Anthology

Chennai, Tamil Nadu, India (Hybrid)
2 Months ago
Inworld AI - Staff Backend Engineer

Inworld AI

Mountain View, California, United States (Hybrid)
1 Month ago
ByteDance - Site Reliability Engineer Intern (Cloud and System)

ByteDance

San Jose, California, United States (On-Site)
1 Month ago
Google - Staff Software Engineer, Networking Infrastructure

Google

Warsaw, Masovian Voivodeship, Poland (On-Site)
1 Month ago
Next Level Business Services - Xymon Integration Engineer

Next Level Business Services

Mount Laurel Township, New Jersey, United States (On-Site)
7 Months ago
ByteDance - LLM Coding Trainer - Specialist

ByteDance

Singapore (On-Site)
7 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Orlando, Florida, United States

NVIDIA - Senior Platform Software Engineer, PCIe

NVIDIA

Santa Clara, California, United States (On-Site)
1 Month ago
Whatnot - Engineering Manager, Seller Scaling

Whatnot

San Francisco, California, United States (On-Site)
1 Month ago
Warner Bros Games - Graphics Operator

Warner Bros Games

Atlanta, Georgia, United States (On-Site)
10 Months ago
Fashionphile - Retail Store Manager

Fashionphile

Boca Raton, Florida, United States (On-Site)
2 Months ago
IMC - L&D Program Manager

IMC

Chicago, Illinois, United States (Hybrid)
1 Month ago
UPF Industries  - Assembler I

UPF Industries

Liberty, North Carolina, United States (On-Site)
3 Weeks ago
Google - Software Engineering Manager II, Geo

Google

Boulder, Colorado, United States (On-Site)
1 Month ago
Limit Break - Senior Backend Engineer, Core Services (Blockchain focused)

Limit Break

United States (Remote)
3 Months ago
Activision - Senior Character Technical Artist

Activision

Los Angeles, California, United States (On-Site)
2 Months ago
The Walt Disney Company - KGO Newswriter/Producer

The Walt Disney Company

San Francisco, California, United States (On-Site)
3 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

The Walt Disney Company - Sr Security Specialist - Governance

The Walt Disney Company

Orlando, Florida, United States (On-Site)
1 Month ago
Axinous - Technical Customer Success Manager

Axinous

Hong Kong (Remote)
3 Months ago
Netflix - Engineering Manager, Security Incident Response

Netflix

Warsaw, Masovian Voivodeship, Poland (On-Site)
4 Months ago
Mattel  Inc  - Manager GRC

Mattel Inc

California, United States (On-Site)
6 Months ago
SmileGate - Security Threat and Incident Analysis

SmileGate

Seongnam-si, Gyeonggi-do, South Korea (On-Site)
2 Months ago
ION - Markets Governance, Risk and Controls Manager

ION

India (On-Site)
7 Months ago
Barracuda Networks  Inc  - Channel Solution Architect

Barracuda Networks Inc

Illinois, United States (Remote)
2 Months ago
PwC - Financial Sector Cyber Security Senior Manager

PwC

Amsterdam, North Holland, Netherlands (On-Site)
4 Months ago
Google - Technical Solutions Consultant, End to End Systems

Google

New York, New York, United States (On-Site)
1 Month ago
Evolution - IT Security Engineer (Red team)/ Penetration tester

Evolution

Sofia, Sofia City Province, Bulgaria (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

About The Company

From classic animated features and exhilarating theme park attractions to cutting edge sports coverage, and the hottest shows on television, The Walt Disney Company has been making magic since 1923, creating unforgettable stories that connect with audiences around the world. And we’re just getting started!

The key to our success…. The Cast, Crew, Imagineers and Employees who honor Disney’s rich legacy by stretching the bounds of imagination to create the never-before-seen, bringing unparalleled entertainment experiences to people of all ages. Begin a career that delivers unparalleled creative content and experiences to audiences around the world and just imagine the stories you could be part of…

What is #LifeAtDisney like? It’s a series of magical moments with cast members and employees developing and telling our stories in the most innovative ways. Whether it’s a day spent as a Disney VoluntEAR, or celebrating the release of a new interactive experience, retail product or movie, our days are filled with the knowledge that we are creating entertainment experiences the whole family can enjoy. Follow @DisneyCareers on Facebook, Twitter and Instagram for a peek behind-the-curtain, and discover how you could connect to a world of stories with Disney!

New York, New York, United States (On-Site)

New York, New York, United States (On-Site)

Burbank, California, United States (On-Site)

Celebration, Florida, United States (On-Site)

Buenos Aires, Buenos Aires, Argentina (On-Site)

Seattle, Washington, United States (On-Site)

Santa Monica, California, United States (On-Site)

Glendale, California, United States (On-Site)

Anaheim, California, United States (On-Site)

View All Jobs

Get notified when new jobs are added by The Walt Disney Company

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug