Security Governance Lead - Secrets Management & PAM

Who We Are:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Identity and Access Management (IAM) Security & Governance team is one of the primary functional teams under the enterprise-supporting IAM organization within Enterprise Technology. This team is accountable and essential for the security and governance of the core identity services across the organization, including Secrets Management and Privileged Access Management (PAM). Specifically, this team’s mission is to define, deliver, enforce and administer policies, standards, controls, platforms, and security practices for workforce identity across The Walt Disney Company (TWDC) to reduce security risk and enable IAM service effectiveness.

What You Will Do:

We are hiring a Security Governance Lead - Secrets Management & PAM to join our Team!

You will be responsible for driving forward all cyber process, governance, and administration initiatives around the enterprise Secrets Management program and enterprise PAM solution, which includes governance around secret scanning and storage, security of the enterprise PAM solution, secrets solutions’ configuration management, and timely securing of secrets enterprise wide.

Responsibilities:

• Own majority of executive and business partner communications and reporting on the Secrets Management Program, including to segment security teams, internal audit teams, etc.

• Act as a SME in driving operational and security improvements to the overall Secrets Management program and PAM service. Gain buy-in from key stakeholders for program success.

• Manage multiple competing tasks/responsibilities simultaneously, including program roadmap advancement and oversight, engagement with customers, intra-team coordination and collaboration, stakeholder reporting, etc.

• Provide knowledge of TWDC information security and regulatory policies and standards in the area of secrets management and privileged access management

Must Have:

• Minimum of 7+ years of related experience

• Experience in assessing and reviewing configurations of various secrets scanning and PAM solutions.

• Familiarity with various secrets management solutions, such as GitGuardian, ArmorCode, cloud scanning solutions, and vaulting solutions (e.g., HashiCorp, AWS Secrets Manager, Azure Key Vault, etc.)

• Experience securing exposed secrets, refining scanning results

• Experience partnering on technical risk assessments, performing advanced data analytics, facilitating compliance evaluations, driving governance methodologies, creating technical standards, designing visual dashboard/reporting mechanisms, and formulating risk remediation strategies.

• Familiarity with governing PAM solutions (e.g., CyberArk, BeyondTrust, Okta ASA, etc.)

Nice to Have:

• CISSP certification

Education:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

The hiring range for this position in Burbank, California is $126,400.00-$169,500.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.