“We Power the Magic!” That’s our motto at Disney Experiences (DX) Tech & Digital. Our team creates world-class immersive digital experiences for the Company’s premier vacation brands. We deliver experiences to consumers through our Disney’s Parks & Resorts worldwide, Disney Cruise Lines, and Disney Vacation Club. We are responsible for the end-to-end digital and physical Guest experience for all technology & digitally led initiatives across the Attractions & Entertainment, Food & Beverage, Resorts & Transportation and Merchandise lines of business, as well as other initiatives such as Hey, Disney!
This role sits in the Data Products & Platforms organization within DX and as a Sr Software Engineer, you will report into the Sr Manager who oversees data GRC practices.
This role sits in the Data Products & Platforms organization within Technology & Digital for Disney Experiences. It works closely with key business units from across the company. Our Data Products & Platforms organization is seeking a Governance, Risk & Compliance (GRC) Sr Software Engineer who will be an outstanding addition to our team. As a GRC Software Engineer at Disney Experiences (DX), you will provide support and mentorship in ensuring that DX maintains a compliance and risk posture. A successful candidate for this role is technical but would be offering some non-technical support on large enterprise initiatives, as well as technical vendor reviews & final validation on effective execution of engagements in compliance with company policies & standards. If you are technology minded and passionate about GRC involving collaborating with multiple teams within Disney Experiences & The Walt Disney Company, then this is an excellent role for you.
You Will:

• Lead small projects encompassing analysis, design, programming, debugging, and modification of software enhancements and/or new products used in local, networked, cloud-based, or Internet-related computer programs
• Responsible for creating technical configuration and code for Privacy Enhancement Tooling for tasks encompassing data classification, data cataloging and data access policy real-time enforcement.
• Responsible for performing testing and debugging of applications and privacy enhancement tooling platforms.
• Work typically involves large or sophisticated data domains and requires the ability to create concise documentation that is clear to users, as well as related data contracts and configurations for the operations of Privacy Enhancement Tooling.
• Possess a proven understanding of current programming language and technologies, with strong skills in writing code and completing programming tasks
• Interact with users to define system requirements and/or necessary modifications
• Conceive, design, develop, test, and implement software components, fixes, improvements, and/or new systems and applications
• Design and develop highly scalable software systems and applications
• You will be expected to stay up to date with emerging technologies especially as they relate to Governance, Risk and Compliance software best practices
• Ensure policies and procedures are implemented and maintained so organizational regulatory needs are met.

Support implementation of special projects related to GRC activities as assigned.
Collaborate with engineering and regulatory readiness teams to translate and apply technical requirements.
Support architectural design sessions, and proof of concept design sessions as technical advisor, with work to include architecture diagrams that take GRC requirements into consideration.
Participate in audits & assessments, supporting the identification of gaps and participate in crafting solutions to close the gaps. In some cases, you'll supervise and guide an implementation team, in others you will create and implement solutions hands on.
Serve as the key participant for technical reviews in the Third-Party Assessment Review progress.
Maintain up-to-date detailed knowledge of the compliance and governance industry, including awareness of new or revised regulations, Information Security norms and industry standards.
You Have:

• 5 years of information security technology compliance, risk, or audit experience.
• Comfortable working in an agile environment
• Knowledge of compliance frameworks, controls & regulations.
• Experience participating in enterprise prioritized GRC projects with validated applications in business and technical environments;
• Experience balancing multiple projects, engaging various customers, and driving accountability to meet timelines.
• Cloud security compliance controls experience (AWS strongly preferred).
• Demonstrable experience understanding compliance assessments and applying remediations.
• Collaborative work style: ability to develop and maintain effective working relationships both internal and external to the organization.
• Outstanding verbal, written and interpersonal communication skills with the ability to apply common sense to carry out instructions.

Nice To Have:

• Information security related certifications. (e.g. CISM, CISA, GIAC certifications).
• Comfortable with handling, implementing, and using audit and compliance management tools (Alation, BigID, Immuta and Anomalo) in industry forward data warehouses including Snowflake.
• Comfortable handling, implementing, and using audit and compliance management tools (Alation, BigID, Immuta and Anomalo) in industry forward data warehouses (Snowflake, Databricks).
• Innovation mind frame coupled with an agile approach. This team is establishing a new approach to governance by design and nimbleness in design thinking and implementation is central to success in the role.

Required Education:

• Bachelor's degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

Preferred Education:

• Master’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

#DISNEYTECH
The hiring range for this position in California is $157,605.00 to $182,490.00 per year and in Washington is $165,110.00 to $191,180.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.