Sr. Compliance Analyst

Relha LLC; Celebration, Northern (FL, KY); Hybrid; USD 112,000 - 140,000; Full time

Job summary

Disney Signature Experiences in Orlando seeks a Senior Compliance Analyst to coordinate the remediation of security findings and vulnerabilities across the DSE portfolio. This role prioritizes security/compliance tasks, communicates latest guidelines, and reports compliance metrics to leadership.

Requirements include 5+ years in Information Security & Compliance with certifications such as CISA or CISSP preferred. On-site presence in the Orlando area is expected.

Qualifications

• 5+ years of experience in Information Security & Compliance (Security Audits, Vulnerability Management, NIST Cybersecurity Framework)
• Experience coordinating remediation and audits across enterprise security programs
• Strong ability to communicate complex security concepts to diverse audiences

Responsibilities

• 35% - Lead remediation of security findings/vulnerabilities with cross-functional teams.
• 25% - Manage security/compliance initiatives and maintain project plans.
• 15% - Build relationships to enforce security & compliance guidelines.
• 10% - Support PCI/SOX audits and GIS/Enterprise Security programs.
• 10% - Act as liaison between Enterprise Security, GIS teams and DSE Tech org.

Skills

NIST CSF

Cybersecurity

Project management

Communication

Education

Bachelor's degree

Job description

This is not a remote role. You must be in the area or willing to relocate.

Job Summary:

The Disney Signature Experiences (DSE) Senior Compliance Analyst coordinates the technical remediation of security findings and vulnerabilities within the DSE portfolio. This role is responsible for the prioritization of security and compliance tasks, communication of the latest guidelines, expertise of cybersecurity and compliance subject matter, and influencing the timely delivery and scheduling of remedial efforts across Disney Signature Experiences. Additionally, they are responsible for the report-out of compliance metrics and status to leadership.

What You’ll Do:

Expectations: Focus on security audits which are required for numerous regulatory requirements such as PCI, PII, and GDPR. Obtain and provide evidence of compliance to Enterprise Security and assessors that meet the standards and requirements set forth. Oversee and work with teams on remediating findings and vulnerabilities. Oversee and work with teams on remediating any Penetration test findings, logging and monitoring tool compliance, anti-virus/anti-malware compliance, and other security functions and tools.

Tasks May Include: Security assessment tracking, project evaluations, business and IT consulting, oversee activities of offshore resources, regulatory requirements and auditing deliverables, assessment and management audit support, validation of monitoring tools.

Duties:

• 30% - Daily Findings and Vulnerability Management triaging, tracking, and remediation by working closely with the appropriate teams to ensure a solid understanding and timely resolution.
• 25% - Project Management of Security & Compliance initiatives. Build, communicate, maintain, and drive project plans to aid in the security and compliance of DSE. Serve as a coordinator and partner to app owners, Solutions Engineers, leadership, contractors, and any necessary stakeholders within the project space. Keep project plans updated, communicate plans proactively, and follow through on plans until completion.
• 15% - Develop strong relationships across the DSE Digital & Technology organization and leverage those relationships to execute against Security & Compliance guidelines, negotiating priorities while driving through resolution.
• 10% - Support DSE leadership in executing against Security & Compliance project initiatives such as GIS/Enterprise Security programs and PCI/SOX Audits.
• 10% - Act as primary liaison between Enterprise Security, Global Information Security teams and the DSE Technology organization and provide subject matter expertise as applicable.
• 10% - Effectively communicate with key stakeholders of various levels across Technology and broader Disney organization through various mediums (ie. presentations, email, informal/formal meetings).

Expected Discretion:

Minimal supervision. Daily collaboration with various Technology teams to identify and remediate cybersecurity vulnerabilities and therefore minimal authority or discretion by this role is required. Frequent exposure to executives for report-outs and the latest security & compliance guidelines/trends.

Expected Skills:

Deep understanding of cybersecurity – NIST Cybersecurity Framework, application development and technology platform operations. Ability to articulate complex technical concepts into easy-to-understand requirements. Strong coordination skills and general project management skills.

Requirements:

Must have 5+ years of experience in Information Security & Compliance (Security Audits,Vulnerability Management, NIST Cybersecurity Framework)

Bachelor’s degree in technology related field and/or equivalent work experience

Preferred Certifications and Experience:

CISA, Certified Information Systems Auditor

CISSP, Certified Information Systems Security Professional

#DISNEYTECH

The hiring range for this position in Orlando is $111,900.00 - $140,000.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

DX Technology

Job Posting Primary Business:

Primary Job Posting Category:

Security Governance

Employment Type:

Primary City, State, Region, Postal Code:

Alternate City, State, Region, Postal Code: