Security Specialist – Compliance
| Company | The Walt Disney Company |
|---|---|
| Location | Seattle, WA, USA, Orlando, FL, USA, Burbank, CA, USA, New York, NY, USA |
| Salary | $95300 – $127800 |
| Type | Full-Time |
| Degrees | |
| Experience Level | Mid Level |
Requirements
- 3 years of IT audit, or IT security and/or compliance experience
- Experience with audits/assessments in complex environments
- Experience interpreting and auditing external security regulations
- Working knowledge of common IT security frameworks
- Ability to grasp underlying technology stacks and document end-to-end service delivery flows
- Good organizational, analytical, and problem-solving skills – balancing multiple priorities under tight deadlines
- Excellent written, verbal, and visual communication for partners (internal & external) in all roles and levels
Responsibilities
- Coordinate and conduct security compliance assessments, including scheduling, planning, and scoping.
- Evaluate security compliance with external requirements and internal policies and standards.
- Identify and validate key control attributes for testing.
- Conduct informational walkthroughs to clarify processes and architectures.
- Collect and verify artifacts to support the assessment of security controls and procedures.
- Proactively manage and follow up on all requests.
- Document assessment findings and recommendations to management, highlighting the effectiveness and efficiency of control mechanisms.
- Document assessment results and detailed control process narratives in workpapers.
- Communicate the elements of effective and sustainable control design to IT and business partners.
- Coordinate continuous control monitoring mechanisms, collaborating with IT, Segment, and business partners to source and interpret data reflecting the current state of the control environment for TWDC.
- Facilitate the collection of control attestations and questionnaires for targeted controls and systems.
- Manage inventories and track remediation efforts and compensating controls.
- Stay informed about compliance and assessment trends within TWDC, at suppliers, and from legislators and regulatory bodies.
Preferred Qualifications
- Prior experience working within a global media, entertainment organization or fortune 100 company
- Security certification (CISSP, CISA, GSEC) or comparable certification