Staff Security Specialist, Information Security - Lead Security Solution Architect

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.
• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

This Lead Security Solution Architect plays a crucial role in designing and implementing security strategies that meet the needs of the business. They will focus on designing, implementing and managing comprehensive security solutions to protect systems, data and applications from cyber threats. The Architect will conceptualize and develop solutions to improve security posture and lead projects from conception to design to implementation. The position will also provide periodic review and feedback for all new and existing security standards. The position is also expected to mentor junior team members and educate our partners and customers to ensure security is something that everyone values and supports.

Responsibilities of Role:

• Design and develop solutions for complex systems that meet or exceed company security requirements and are tailored to address the needs of the Segment.
• Establish relationships with business stakeholders to ensure business objectives and regulatory requirements are accounted for when developing solutions.
• Lead the development of execution plans to implement short and long term security goals.
• Lead security risk assessments to identify vulnerabilities and control gaps in complex system architectures.
• Develop mitigation strategies and integrate them into the overall architecture.
• Drive work with Segment teams to ensure solutions are integrated into existing infrastructures, applications, and cloud platforms.
• Educate and influence business leaders, project managers, and technical teams to ensure security considerations are factored into all technology projects.
• Partner and coordinate with peers across the company to establish security policies, standards, and best practices to maintain compliance and improve overall security posture.
• Actively research information security trends, tools, and technologies to stay ahead of emerging threats.
• Analyze, evaluate and propose system design improvements to detect and respond to security breaches or incidents effectively.
• Lead evaluation of complex third party service provider integrations for compliance with information security policies and standards and prepare appropriate documentation and presentation materials.

Experience Must Haves:

• 10 years of related IT experience.
• Deep knowledge of cybersecurity frameworks (e.g. NIST, ISO27001)
• 7 years of demonstrated experience as lead responsible for providing security solution architecture expertise on large-scale projects
• Highly skilled in conducting architectural reviews across a wide range of technologies (e.g. encryption, operating systems, network architecture, cloud security, identity management)
• Strong understanding of security tools (e.g. SIEM systems, firewalls, anti-malware)
• Demonstrated experience and understanding of major cloud computing platforms (ex. AWS, Azure, Google Cloud Platform)
• 7 years experience in identifying risk and development of mitigation plans
• Demonstrated experience in a security program for a large and complex organization
• Working knowledge of security related legislation/regulations with emphasis on PCI and privacy
• Excellent problem solving skills with an ability to develop creative alternatives to complex problems, as well as continuous process improvement skills
• Demonstrated ability to handle sensitive information
• Ability to establish credibility and working relationships with a wide range of personnel, including operations, management, executive, and legal staff
• Demonstrated professional written, verbal, and presentation communications skills
• Proven ability to work effectively in a fast-paced environment as part of a high performance team
• Security accreditation (e.g., CISSP, GCIH, CISM, etc.)

Nice To Haves:

• Major cloud provider platform certification (e.g. AWS Solution Architect, Google Cloud Engineer, Microsoft Solution Architect, etc.)

Education:

• Bachelor’s degree in Cyber Security, Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience