Security Specialist, Corrective Action
Postuler maintenant Postuler ultérieurement Job ID 10113161 Emplacement Burbank, Californie, États-Unis / Orlando, Floride, États-Unis Entreprise The Walt Disney Company (Corporate) Date de publication 19/02/2025Résumé du poste:
At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.
The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Seattle, Burbank, and Orlando.
Corporate is required to address security control gap issues identified through various assessment programs. A cybersecurity corrective action job involves developing and implementing plans to address security gaps and vulnerabilities. This includes issues identified through internal assessments against corporate policy, vulnerability scanning, penetration testing, and regulatory issues identified through compliance program assessments such as PCI and EU data privacy.
What You'll Do:
- Review reports, assessments, and findings to identify remediation and/or corrective action needed.
- Coordinate with IT and business partners to facilitate necessary remediation and corrective action.
- Verify remediation and corrective action activity achieves compliance against security standards such as CIS Benchmarks, NIST, and TWDC policies and standards.
- Document open items in status reports, including next steps, dependencies, and stakeholders.
- Communicate results to stakeholders, including technical and non-technical audiences.
- Provide recommendations to improve security posture.
- Assist in improving security baselines and standards.
- Stay updated on evolving security guidelines and incorporate them into IT and business practices.
- Stay informed on emerging threats and vulnerabilities.
- Proactively recommend adjustments to mitigate risks.
Required Qualifications & Skills:
- A minimum of 3 years of related cybersecurity experience
- Demonstrated experience facilitating corrective action.
- Ability to work well with individuals and teams with varying technical and business backgrounds.
- Understanding of security frameworks and standards.
- Analytical thinking and attention to detail.
- Established problem-solving skills with an ability to develop creative alternatives to complex problems, as well as continuous improvement process skills
- Demonstrated ability to handle confidential information.
- Experience in a security program for a large and complex organization.
Required Education:
- Bachelor's degree or equivalent experience in Cyber Security, Computer Science, Management Information Systems, or related field.
Preferred Education:
- One or more general security certifications including PCNSE, Security+, CySA+, CCNA Cyber Ops, AWS, GSEC, GICSP, CISSP, or other relevant certifications
- One or more vulnerability assessment or auditing certification including CISSA, CISM, GCCC, GSNA or other relevant certifications
The hiring range for this position in California is $95,300.00 to $127,800.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
Sur The Walt Disney Company (Corporate):
Chez Disney Corporate, vous verrez comment les secteurs d’activités qui animent les marques puissantes de la société se rassemblent pour former la société de divertissement la plus novatrice, développée et admirée au monde. En tant que membre d’une équipe d’entreprise, vous travaillerez avec les leaders de classe mondiale qui mettent au point les stratégies qui permettent à The Walt Disney Company de rester à la pointe du divertissement. Collaborez avec d’autres penseurs novateurs pour permettre aux meilleurs conteurs de créer des souvenirs pour des millions de familles du monde entier.
Sur The Walt Disney Company:
The Walt Disney Company, ainsi que ses filiales et sociétés affiliées, forme l’une des principales entreprises internationales diversifiées de divertissement familial et de médias. Elle comprend trois secteurs d'activités essentiels : Disney Entertainment, ESPN et Disney Experiences. Depuis ses modestes débuts en tant que studio de dessins animés dans les années 1920 jusqu’à son statut de référence actuel dans le secteur du divertissement, Disney poursuit fièrement sa tradition de création d’histoires et d’expériences exceptionnelles pour tous les membres de la famille. Les histoires, les personnages et les expériences de Disney touchent les consommateurs et les visiteurs du monde entier. À travers nos activités présentes dans plus de 40 pays, nos employés et cast members collaborent pour créer des expériences de divertissement appréciées à la fois au niveau universel et local.
Le poste est rattaché à Disney Worldwide Services, Inc. , qui fait partie d’une entreprise que nous appelons The Walt Disney Company (Corporate).
Disney Worldwide Services, Inc. est un employeur qui souscrit au principe d’égalité des chances à l’emploi. Les candidat(e)s seront pris(es) en considération pour un emploi sans distinction de race, de religion, de couleur, de sexe, d’orientation sexuelle, de genre, d’identité de genre, d’expression de genre, d’origine nationale, d’ascendance, d’âge, d’état matrimonial, de statut militaire ou d’ancien combattant, d’état de santé, d’informations génétiques ou de handicap, ou de tout autre motif interdit par la loi fédérale, étatique ou locale. Disney défend un environnement commercial où les idées et décisions de tous et toutes nous aident à grandir, innover, créer les meilleures histoires et être pertinents dans un monde en évolution constante.