Senior Security Specialist

Disneyland Hong Kong; Greater London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A global entertainment company based in London is seeking a Senior Security Specialist to join their Global Information Security team. The role involves analyzing and mitigating risks, supporting international projects, and ensuring adherence to security policies. The ideal candidate will have a background in IT Security, experience with risk management, and a solid understanding of security tools. This position offers a hybrid work environment with four days in the office and one day remote weekly.

Benefits

25 days annual leave

Private medical insurance & dental care

Free Park Entry

Disney Discounts

Excellent parental and guardian leave

Qualifications

• Minimum 2 years of experience in information technology security.
• Basic understanding of cloud infrastructure engineering.
• Experience interpreting and assessing risk to form decisions.

Responsibilities

• Analyze and mitigate risk in technology environments.
• Provide security advice for international projects.
• Document environment risk and provide regular risk reporting.

Skills

Risk Management

Information Security

Vulnerability detection tools

Cyber security best practices

Time management

Education

BA/BS or BSc in Business, Computer Science, IT Security or Information Security

Tools

Tenable

Qualys

Crowdstrike

Prisma

Job description

About the Role & Team

Be you, be here, be part of the story!

We are looking for an experienced Senior Security Specialist to join our Global Information Security (GIS) team here in London!

At Disney,we’reERING storytellers.We make the impossible, possible.The Walt Disney Company is a world‑class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences. prosecute.

The Global Information Security (GIS)group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. They protect the brand and reputation while enabling and supporting business objectives.

In order to ensure that our services keep TWDC secure, our GIS team follows an ongoing, iterative process, including continued reevaluation of our services over time to address time emerging threats as well as changes in business and technology.

1. Analysis of known and emerging threats to determine risks against TWDC assets

2. Creation, maintenance, governance and communication of security policies and standards across TWDC

3. Assessment and audit of compliance against the security policies and standards

4. Assurance that TWDC assets are effectively managed and monitored to新区 meet TWDC security criteria

We are looking to add people to our team who are focused on delivery, prioritize data‑driven decisions over opinions, are continuous learners, passionate about information security and love their work.

Join us in shaping the magic behind the scenes!

Please Note: This is an office‑ Nhật role. 4 days working in the Hammersmith, London office with 1 day working from home (Monday or Friday).

What You Will Do

As a Senior Security Specialist, the successful candidate will work closely with technology teams and business units to analyse and mitigate risk in their environments. There will be responsibility in providing security advice and support International TWDC projects to ensure security requirements are met and aligned with Disney Information Security Policies and Standards.

This role will extend to supporting onboarding and monitoring international irre conust infrastructure to ensure assets are protected and visibility is attained. Additionally, the candidate will review, communicate and manage remediation of existing and newly discovered security findings and vulnerabilities.

Responsibilities

• Managing security aspect of TWDC International projects for business units and technology while prioritizing work and measuring quality of their deliverables
• Build Tämä strong understanding of the international environment and support security initiatives
• Independently prioritize high risk swapped queries and tasks ensuring they go through a risk assessment
• Document environment risk and provide regular risk reporting on ongoing initiatives
• Perform security reviews when required for high‑risk impact systems
• Supporting the onboarding and monitoring of international infrastructure to ensure visibility
• Review, communicate and manage remediation of security findings and vulnerabilities
• Support and manage security aspect of TWDC International projects working closely business units
• Ensure that a risk‑based approach to IT security is adopted in every part of the business
• Align best practices with GIS (Global Information Security)
• Assist manager with coordination and reporting incidents
\ proxies
• Support and help manage 3rd party security compliance process withλλ business input
• Work with domestic security to support risk assessments and define security mitigating controls
• Ensure business, technology and security are in line with privacy requirements i.e. GDPR
• Assist in documenting regional risk management processes
• Develop a culture of security awareness and practice throughout TWDC International.
• Through example and behavior, strive to provide peer leadership to other team members with the goal of being excellent service providers and enablers to other constituencies (both internal and external)

Required Qualifications & Skills

• An experienced Security Specialist, possessing a BA/ BS or BSc within Business, Computer Science, IT Security or Information Security and a minimum of 2 years of experience information technology security.
• Direct experience within Risk Management, Information Security and Audit & Compliance monitoring.
• Basic understanding of cloud infrastructure engineering / architecture.
• Solid understanding QUERY of security and vulnerability detection tools (e.g., Tenable, Qualys, Crowdstrike, Prisma).
• Working knowledge of information security related best practices and standards such as ISO 270ِ, SOC 2, NIST, PCI requirements etc.
• Experience of interpreting and assessing risk based on information from numerous sources to form a reasoned decision.
• Good understanding of cyber and technology security best practices.
• Preferred experience with a large company and/or Big 4 accounting firm.
• Experience working with regulatory compliance frameworks such as GDPR
• Knowledge of conducting risk assessments using best practice risk management methodologies
• Working towards one or more credentials - CISA,_specs CISM, CRISC, ISO27001 LA/LI, CCSP, CISSP, Cloud+

Personal Attributes

• Strong organizational and time management skills
• Ability to manage multiple priorities and work effectively
• Excellent written and verbal communication skills including documentation and reporting
• Ability to establish credibility and working relationships with business and technology teams.

Perks

• 25 days annual leave
• Private medical insurance & dental care
• Free Park Entry: You will have the opportunity to enter any of our parks with your family and friends for free
• Disney Discounts: you are entitled to discounts on designated Disney products, resort F&B and ticketing
• Excellent parental and guardian leave
• Employee Resource Groups – WOMEN @ Disney, Disney DIVERSITY, Disney PRIDE, ENABLED, and our Mental Health & Wellbeing Group, TRUST.

The Walt Disney Company is an Equal Opportunity Employer. We strive to be a diverse workforce that რ represents our audiences, and where all can thrive and belong. Disney is committed to forming a team that includes and respects a variety of voices, identities, background, and experiences and perspectives.