Who We Are
At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a dedication to crafting and delivering unforgettable experiences - and we're constantly looking for new ways to improve these exciting experiences.
The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
We Are Hiring!
We are seeking a Sr. Manager, Security Governance to join the Global Information Security (GIS) group. Our group provides services to protect the value and use of Disney's information through collaboration, standardization, compliance, and education across The Walt Disney Company.
Our Main Focus Areas:

• Reduce the risk of both accidental and malicious data disclosure
• Identify, monitor, engage with complete inventory of information
• Establish appropriate policies and procedures to be followed
• Educate user community to minimize risk

What You Will Do
Information Security Governance ensures that enterprise security is driven by clear policies, measurable standards, and comprehensive guidelines.
Responsibilities of Role:

• Review industry information security best practices and work across the company to implement in the form of policy
• Develop and deliver governance reporting to advise leadership on alignment to policy
• Lead a team that provides governance consultation, using in-depth knowledge of TWDC policies and standards, to ensure segments and business units understand the intent of Company security requirements
• Provides internal audit consultation, using in-depth knowledge of policies and standards, to ensure audit findings are reflective of our security requirements in terms of efficiency and design
• Lead an effort to automatically incorporate policy as standard in all technology design
• Lead annual NIST assessments and provide reporting to the CISO

Must Have

• Minimum of 10+ years of related work experience
• 7+ years of information audit experience
• Experience leading governance, risk or compliance teams
• Superb communication, problem-solving and decision-making skills
• Knowledge in work management and GRC solutions; Archer, Jira, Confluence
• Collaborate across multiple departments as well as with senior leadership.
• Solid understanding of automated policy implementation and cloud security posture management
• Experience delivering security governance programs at scale
• Working knowledge of CIS-18, NIST for policy development and alignment
• Experience setting governance strategy, developing and reporting on KPI, KRI, OKR metrics

Nice To Have

• Experience with information security audits, including ISO27001, NIST, SOX, PCI-DSS
• Solid understanding of automated policy implementation and cloud security posture management
• Knowledge of the primary cloud providers technology solutions
• One of the following certifications: CISSP, CISM, CISA PCIP, ITIL V3 Foundations
• Ability to organize work using Kanban methodologies

Education

• Bachelor's degree and/or equivalent work experience

#DISNEYTECH
#LI-JP4
The hiring range for this position is $142,106.00 to $209,660.00 per year, which factors in various geographic regions. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.