Sr. Compliance Analyst

The Walt Disney Company • Celebration, FL

2d • $111,900 - $140,000 • Onsite

About The Position

The Disney Signature Experiences (DSE) Senior Compliance Analyst coordinates the technical remediation of security findings and vulnerabilities within the DSE portfolio. This role is responsible for the prioritization of security and compliance tasks, communication of the latest guidelines, expertise of cybersecurity and compliance subject matter, and influencing the timely delivery and scheduling of remedial efforts across Disney Signature Experiences. Additionally, they are responsible for the report-out of compliance metrics and status to leadership.

Requirements

• Must have 5+ years of experience in Information Security & Compliance (Security Audits, Vulnerability Management, NIST Cybersecurity Framework)
• Bachelor’s degree in technology related field and/or equivalent work experience

Nice To Haves

• CISA, Certified Information Systems Auditor
• CISSP, Certified Information Systems Security Professional
• Lei Sarbanes-Oxley/COSO

Responsibilities

• Focus on security audits which are required for numerous regulatory requirements such as PCI, PII, and GDPR.
• Obtain and provide evidence of compliance to Enterprise Security and assessors that meet the standards and requirements set forth.
• Oversee and work with teams on remediating findings and vulnerabilities.
• Oversee and work with teams on remediating any Penetration test findings, logging and monitoring tool compliance, anti-virus/anti-malware compliance, and other security functions and tools.
• Security assessment tracking, project evaluations, business and IT consulting, oversee activities of offshore resources, regulatory requirements and auditing deliverables, assessment and management audit support, validation of monitoring tools.
• Daily Findings and Vulnerability Management triaging, tracking, and remediation by working closely with the appropriate teams to ensure a solid understanding and timely resolution.
• Project Management of Security & Compliance initiatives. Build, communicate, maintain, and drive project plans to aid in the security and compliance of DSE. Serve as a coordinator and partner to app owners, Solutions Engineers, leadership, contractors, and any necessary stakeholders within the project space. Keep project plans updated, communicate plans proactively, and follow through on plans until completion.
• Develop strong relationships across the DSE Digital & Technology organization and leverage those relationships to execute against Security & Compliance guidelines, negotiating priorities while driving through resolution.
• Support DSE leadership in executing against Security & Compliance project initiatives such as GIS/Enterprise Security programs and PCI/SOX Audits.
• Act as primary liaison between Enterprise Security, Global Information Security teams and the DSE Technology organization and provide subject matter expertise as applicable.
• Effectively communicate with key stakeholders of various levels across Technology and broader Disney organization through various mediums (ie. presentations, email, informal/formal meetings).

Benefits

• A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior