Sr. Compliance Analyst

Sr. Compliance Analyst

This is not a remote role. You must be in the area or willing to relocate.

The Disney Signature Experiences (DSE) Senior Compliance Analyst coordinates the technical remediation of security findings and vulnerabilities within the DSE portfolio. This role is responsible for the prioritization of security and compliance tasks, communication of the latest guidelines, expertise of cybersecurity and compliance subject matter, and influencing the timely delivery and scheduling of remedial efforts across Disney Signature Experiences. Additionally, they are responsible for the report-out of compliance metrics and status to leadership.

What You'll Do:

Expectations: Focus on security audits which are required for numerous regulatory requirements such as PCI, PII, and GDPR. Obtain and provide evidence of compliance to Enterprise Security and assessors that meet the standards and requirements set forth. Oversee and work with teams on remediating findings and vulnerabilities. Oversee and work with teams on remediating any Penetration test findings, logging and monitoring tool compliance, anti-virus/anti-malware compliance, and other security functions and tools.

Tasks May Include: Security assessment tracking, project evaluations, business and IT consulting, oversee activities of offshore resources, regulatory requirements and auditing deliverables, assessment and management audit support, validation of monitoring tools.

Duties:

30% - Daily Findings and Vulnerability Management triaging, tracking, and remediation by working closely with the appropriate teams to ensure a solid understanding and timely resolution.

25% - Project Management of Security & Compliance initiatives. Build, communicate, maintain, and drive project plans to aid in the security and compliance of DSE. Serve as a coordinator and partner to app owners, Solutions Engineers, leadership, contractors, and any necessary stakeholders within the project space. Keep project plans updated, communicate plans proactively, and follow through on plans until completion.

15% - Develop strong relationships across the DSE Digital & Technology organization and leverage those relationships to execute against Security & Compliance guidelines, negotiating priorities while driving through resolution.

10% - Support DSE leadership in executing against Security & Compliance project initiatives such as GIS/Enterprise Security programs and PCI/SOX Audits.

10% - Act as primary liaison between Enterprise Security, Global Information Security teams and the DSE Technology organization and provide subject matter expertise as applicable.

10% - Effectively communicate with key stakeholders of various levels across Technology and broader Disney organization through various mediums (ie. presentations, email, informal/formal meetings).

Expected Discretion:

Minimal supervision. Daily collaboration with various Technology teams to identify and remediate cybersecurity vulnerabilities and therefore minimal authority or discretion by this role is required. Frequent exposure to executives for report-outs and the latest security & compliance guidelines/trends.

Expected Skills:

Deep understanding of cybersecurity – NIST Cybersecurity Framework, application development and technology platform operations. Ability to articulate complex technical concepts into easy-to-understand requirements. Strong coordination skills and general project management skills.

Requirements:

• Must have 5+ years of experience in Information Security & Compliance (Security Audits, Vulnerability Management, NIST Cybersecurity Framework)
• Bachelor's degree in technology related field and/or equivalent work experience

Preferred Certifications and Experience:

• CISA, Certified Information Systems Auditor
• CISSP, Certified Information Systems Security Professional
• Lei Sarbanes-Oxley/COSO

#DISNEYTECH

The hiring range for this position in Orlando is $111,900.00 - $140,000.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.