Senior Security Specialist

Disney Parks and Resorts; Greater London; Hybrid; GBP 65,000 - 75,000; Full time

Job summary

A leading entertainment company is seeking a Senior Security Specialist to join their Global Information Security team in London. The role involves managing security aspects of international projects, providing advice on security policies, and ensuring compliance with regulatory requirements. Candidates must have a BA/BS in relevant fields and at least 2 years of experience in information technology security. Offered perks include private medical insurance and free park entry for family and friends.

Benefits

25 days annual leave

Private medical insurance & dental care

Free Park Entry

Disney Discounts

Excellent parental leave

Qualifications

• Minimum 2 years of experience in information technology security.
• Direct experience in Risk Management, Information Security, and Audit & Compliance monitoring.
• Basic understanding of cloud infrastructure engineering/architecture.

Responsibilities

• Manage security aspect of TWDC International projects.
• Provide security advice and support International TWDC projects.
• Perform security responses for high-risk impact systems.

Skills

Risk Management

Information Security

Audit & Compliance monitoring

Security vulnerability detection tools

Stakeholder management

Education

BA/BS or BSc in Business, Computer Science, IT Security or Information Security

Tools

Tenable

Qualys

Crowdstrike

Prisma

Job description

Job Summary

About the Role & Team

Be you, be here, be part of the story!

We are looking for an experienced Senior Security Specialist to join our Global Information Security (GIS) team here in London!

At Disney, we’re storytellers. We make the impossible, Levy possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - and we’re constantly looking for new ways to enhance and protect these exciting experiences.

The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement and education across the enterprise. They protect the brand and reputation while enabling and supporting business objectives.

In order to ensure that our services keep TWDC secure, our GIS team follows an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business markets and technology.

This Process Includes

1. Analysis of known and emerging threats to determine risks against TWDC assets.
2. Creation, maintenance, governance and communication of security policies and standards across TWDC.
3. Assessment and audit of compliance against the security policies and standards.
4. Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria.

We are looking to add people to our team who are focused on delivery, prioritize data‑driven decisions over opinions, are continuous learners, passionate about information security and love their work.

Join us in shaping the magic behind the scenes!

Please Note: This is an office-based role. 4 days working in the Hammersmith, London office with 1 day working from home (Monday or Friday).

What You Will Do

As a Senior Security Specialist, the successful candidate will work closely with technology teams and business units to analyse and mitigate risk in their environments. There will be responsibility in providing security advice and support International TWDC projects to ensure security requirements are met and aligned with Disney Information Security Policies and Standards.

This role will extend to supporting onboarding and monitoring international infrastructure to ensure assets are protected and visibility is attained. Additionally, the candidate will review, communicate and manage remediation of existing and newly discovered security findings and vulnerabilities.

• Managing security aspect of TWDC International projects for business units547 and technology while prioritizing work and measuring quality of their deliverables.
• Build a strong understanding of the international environment and support security initiatives.
• Independently prioritize high risk queries and tasks ensuring they go through a risk assessment.
• Document environment risk and provide regular risk reporting on ongoing initiatives.
• Perform securityresponses when required for high-risk impact systems.
• Supporting the onboarding and monitoring of international infrastructure to ensure visibility.
• Review, communicate and manage remediation of security findings and vulnerabilities.
• Support and manage security aspect of TWDC International projects working closely business units.
• Ensure that a risk‑based approach to IT security is adopted in every part of the business.
• Align best practices with GIS (Global Information Security).
• Assist manager with coordination and reporting incidents.
• Support and help manage 3rd party security compliance process with business input.
• Work with domestic security to support risk assessments and define security mitigating controls.
• Ensure business, technology and security are inicut with privacy requirements i.e. GDPR.
• Assist in documenting regional risk management processes.
• Develop a culture of security awareness and practice throughout TWDC International.
• Through example and behavior, strive to provide peer leadership to other team members with the goal of being excellent service providers and enablers to other constituencies (both internal and external).

Required Qualifications & Skills

• An experienced Security Specialist, possessing a BA/BS or BSc within Business, Computer Science, IT Security or Information Security and a minimum of 2 years of experience information technology security.
• Direct experience within Risk Management, Information Security and Audit & Compliance monitoring.
• Basic understanding of cloud infrastructure engineering / architecture.
• Solid understanding of security and vulnerability detection tools (e.g., Tenable, Qualys, Crowdstrike, Prisma).
• Working knowledge of information security related best practices and standards such as ISO 2700x, SOC 2, NIST, PCI requirements etc.
• Experience of interpreting and assessing risk based on information from numerous sources to form a reasoned decision.
• Good understanding of cyber and technology security best practices.
• Preferred experience with a large company and/or Big 4 accounting firm.
• Experience working with regulatory compliance frameworks such as GDPR.
• Knowledge of conducting risk assessments using best practice risk management methodologies.
• Working towards one or more credentials - CISA, CISM, CRISC, ISO27001 LA/LI, CCSP, CISSP, Cloud+.

Personal Attributes

• Strong organizational and time management skills.
• Ability to manage multiple priorities and work effectively.
• Excellent written and verbal communication skills including documentation and reporting.
• Ability to establish credibility and working relationships with business and technology teams.
• Excellent stakeholder management.

The Perks

• 25 days annual leave.
• Private medical insurance & dental care.
• Free Park Entry: You will have the opportunity to enter any of our parks with your family and friends for free.
• Disney Discounts: you are entitled to discounts on designated Disney products, resort F&B and ticketing.
• Excellent parental and guardian leave.
• Employee Resource Groups - WOMEN @ Disney, Disney DIVERSITY, Disney PRIDE, ENABLED, and our Mental Health & Wellbeing Group, TRUST.

The Walt Disney Company is an Equal Opportunity Employer":{"row">We strive to be a diverse workforce that is representative of our audiences, and where all can thrive and belong. Disney is committed to forming a team that includes and respects a variety of voices, identities, backgrounds, experiences and perspectives.

The Walt Disney Company Limited is an equal opportunity employer. Applicants will receive consideration for employment without regard to age, race, colour, religion or belief, sex, nationality, ethnic or national origin, sexual orientation, gender reassignment, marital or civil partner status, disability or pregnancy or maternity. Disney fosters a business culture where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a rapidly changing world.