Senior Program Manager, Cyber Security Awareness

The Walt Disney Company • Burbank, CA

4d

About The Position

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences. The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to: Secure the Magic by protecting information systems and platforms. Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests. Strengthen the business through optimizing execution, application, and technology used to protect the Company. Innovate by investing in core capabilities to enhance operational efficiency.

What You’ll Do:
The Senior Program Manager, Cyber Security Awareness serves as the key driver behind Disney’s mission to build a culture of security-minded decision-making across The Walt Disney Company (TWDC). This role combines program management, communications, and behavioral science expertise and will lead the design, implementation, and continuous improvement of global education and awareness initiatives that engage, inform, and empower employees to make secure choices in their daily work. The ideal candidate is an engaging, creative storyteller, data-driven strategist, and cross-functional collaborator who can translate complex security topics into relatable, actionable messages that resonate with global audiences.

Requirements

• Minimum of 7+ years of experience developing cyber security training and program materials
• Direct cybersecurity work experience and strong technical acumen of security principles, threats, and best practices
• Experience managing vendors and budgets related to awareness campaigns, LMS platforms, and creative content production.
• Exceptional communication, storytelling, and presentation skills—able to engage both executive and enterprise-wide audiences including technical and non-technical audiences; demonstrated ability to take highly technical processes and distill them into easily understandable content by the general employee population
• Project management experience, leading medium to large projects of varying complexity and requirements
• Strong interpersonal skills with the ability to cross-functionally work with global teams
• Detail-oriented but able to understand and communicate the big picture
• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

Nice To Haves

• CISSP, CISM, or SANS Security Awareness Professional (SSAP) certification.
• PMP or CAPM certification
• Experience in large global organization with distributed teams.
• Knowledge of behavioral psychology or change management principles.
• Corporate Events experience

Responsibilities

• Program Development: Plan, develop and execute a multi-year Cybersecurity Awareness and Education strategy and associated materials aligned to TWDC’s risk priorities, policies, regulatory, business requirements, and cultural values.
• Partner with Information Security, HR, Communications, Legal, and Technology teams to integrate security messaging across onboarding, compliance, and employee engagement channels.
• Collaborate with business and employee communications partners to strategize and prioritize ongoing cybersecurity awareness campaigns and educational material based on emerging cyber security trends and risks.
• Content Development and Communications: Creating customized and engaging cyber security content through various mediums (training modules, presentations, reference guides, , etc.) across a diverse technical and non-technical global user population while maintaining consistency, creativity, and clarity in messaging.
• Oversee the design and production of information security media: videos, infographics, newsletters, and intranet content.
• Collaborate with learning and employee communications partners to identify, assign, market and distribute training through various delivery means to best suit intended audience and target content awareness based on urgency (in-person training, webinars, training modules, etc.)
• Education and Awareness Responsibilities: Manage and enhance security awareness branding and identity across global business and technology ecosystem —ensuring accuracy, consistency, creativity in messaging.
• Lead and execute TWDC’s Cybersecurity Awareness Month strategy, phishing simulations, e-learning campaigns, and targeted behavioral interventions.
• Maintain GIS internal and employee facing websites to ensure content remains current and user security messaging is aligned to active trends, risks, initiatives and other cyber security priorities.
• Support Incident Response and Phishing Simulation campaigns with awareness and response communications
• Reporting & Metrics: Define annual awareness campaign objectives, success metrics, and performance indicators
• Monitor, track and report on training compliance and overall program effectiveness to annual objectives and performance metrics.
• Regularly assess effectiveness and relevance of training material against industry frameworks and benchmarks to mature and improve the cyber security education & awareness program.
• Maintain current visibility to and understanding of cybersecurity risks and trends, global regulatory requirements (e.g. GDPR, CCPA) , and emerging technologies to continuously mature and improve the cyber security education & awareness program.

Benefits

• A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level