Senior Security Specialist

About the Role & Team
Be you, be here, be part of the story!

We are looking for an experienced Senior Security Specialist to join our Global Information Security (GIS) team here in London!

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.  

The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. They protect the brand and reputation while enabling and supporting business objectives. 

In order to ensure that our services keep TWDC secure, our GIS team follows an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business and technology.

This process includes: 

1. Analysis of known and emerging threats to determine risks against TWDC assets 

2. Creation, maintenance, governance and communication of security policies and standards across TWDC 

3. Assessment and audit of compliance against the security policies and standards 

4. Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria 

We are looking to add people to our team who are focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work.  

Join us in shaping the magic behind the scenes!

Please Note: This is an office-based role. 4 days working in the Hammersmith, London office with 1 day working from home (Monday or Friday).

What You Will Do

As a Senior Security Specialist, the successful candidate will work closely with technology teams and business units to analyse and mitigate risk in their environments. There will be responsibility in providing security advice and support International TWDC projects to ensure security requirements are met and aligned with Disney Information Security Policies and Standards.

This role will extend to supporting on-boarding and monitoring international infrastructure to ensure assets are protected and visibility is attained. Additionally, the candidate will review, communicate and manage remediation of existing and newly discovered security findings and vulnerabilities.

Responsibilities will include:

• Managing security aspect of TWDC International projects for business units and technology while prioritizing work and measuring quality of their deliverables
• Build a strong understanding of the international environment and support security initiatives
• Independently prioritize high risk queries and tasks ensuring they go through a risk assessment
• Document environment risk and provide regular risk reporting on going initiatives
• Perform security reviews when required for high-risk impact systems
• Supporting the onboarding and monitoring of international infrastructure to ensure visibility
• Review, communicate and manage remediation of security findings and vulnerabilities
• Support and manage security aspect of TWDC International projects working closely business units
• Ensure that a risk-based approach to IT security is adopted in every part of the business
• Align best practices with GIS (Global Information Security)
• Assist manager with coordination and reporting incidents
• Support and help manage 3rd party security compliance process with business input
• Work with domestic security to support risk assessments and define security mitigating controls
• Ensure business, technology and security are in line with privacy requirements i.e. GDPR
• Assist in documenting regional risk management processes
• Develop a culture of security awareness and practice throughout TWDC International.
• Through example and behavior, strive to provide peer leadership to other team members with the goal of being excellent service providers and enablers to other constituencies (both internal and external)

Required Qualifications & Skills

• An experienced Security Specialist, possessing a BA/ BS or BSc within Business, Computer Science, IT Security or Information Security and a minimum of 2 years of experience information technology security.
• Direct experience within Risk Management, Information Security and Audit & Compliance monitoring.
• Basic understanding of cloud infrastructure engineering / architecture.
• Solid understanding of security and vulnerability detection tools (e.g., Tenable, Qualys, Crowdstrike, Prisma).
• Working knowledge of information security related best practices and standards such as ISO 2700x, SOC 2, NIST, PCI requirements etc.
• Experience of interpreting and assessing risk based on information from numerous sources to form a reasoned decision.
• Good understanding of cyber and technology security best practices.
• Preferred experience with a large company and/or Big 4 accounting firm.
• Experience working with regulatory compliance frameworks such as GDPR
• Knowledge of conducting risk assessments using best practice risk management methodologies
• Working towards one or more credentials - CISA, CISM, CRISC, ISO27001 LA/LI, CCSP, CISSP, Cloud+

Personal Attributes:

• Strong organizational and time management skills
• Ability to manage multiple priorities and work effectively
• Excellent written and verbal communication skills including documentation and reporting
• Ability to establish credibility and working relationships with business and technology teams.
• Excellent stakeholder management

The Perks

• 25 days annual leave
• Private medical insurance & dental care
• Free Park Entry: You will have the opportunity to enter any of our parks with your family and friends for free
• Disney Discounts: you are entitled to discounts on designated Disney products, resort F&B and ticketing
• Excellent parental and guardian leave
• Employee Resource Groups – WOMEN @ Disney, Disney DIVERSITY, Disney PRIDE, ENABLED, and our Mental Health & Wellbeing Group, TRUST.

The Walt Disney Company is an Equal Opportunity Employer. We strive to be a diverse workforce that is representative of our audiences, and where all can thrive and belong. Disney is committed to forming a team that includes and respects a variety of voices, identities, backgrounds, experiences and perspectives.