Join the Magic of Disney as a Cyber Protection and GRC Specialist
Are you a highly skilled and experienced professional in the field of cyber protection and governance, risk, and compliance (GRC)? Do you have a passion for ensuring the security and integrity of data and systems? Look no further than this exciting opportunity to join the Walt Disney Organization as a Cyber Protection and GRC Specialist. As a remote Disney Data Entry Specialist, you will play a critical role in guiding GRC-related activities and ensuring the clean execution of various tasks within the Cybersecurity Crew.
About the Company and Industry
The Walt Disney Organization is a world-renowned entertainment and media conglomerate that has been a leader in innovation and creativity for nearly a century. With a diverse range of businesses, including film and television production, theme parks, and consumer products, Disney is committed to creating magical experiences for audiences around the globe. As a Cyber Protection and GRC Specialist, you will be part of a team that is dedicated to protecting Disney's assets and ensuring the security and integrity of its systems and data.
About the Team
The Cybersecurity Crew at Disney is a team of green cybersecurity specialists who formulate and implement techniques and recommendations to help the organization align with its commercial enterprise dreams while dealing with dangers correctly and meeting industry guidelines and standards. The team works on cutting-edge technology and toward new innovations in the area of cybersecurity to bring ease and magic to the Disney experience.
Key Responsibilities
- Third-Party Risk Management (TPRM) Software: Assist in the implementation and management of Disney's TPRM software, ensuring the effective identification, assessment, and mitigation of cyber risks associated with third-party vendors and partners.
- Cyber Risk Assessments: Conduct cyber risk assessments and due diligence exams to identify potential security risks and vulnerabilities, and provide recommendations for remediation.
- Stakeholder Management: Collaborate with business stakeholders to confirm the details of risk assessment requests and the scope of engagement, and ensure that all stakeholders are informed and engaged throughout the risk management process.
- Kick-Off Meetings: Conduct kick-off meetings with business stakeholders and third-party vendors to discuss the objectives, scope, and timelines of risk assessments and other GRC-related activities.
- Due Diligence Questionnaires: Coordinate the distribution of due diligence questionnaires to internal stakeholders and third-party vendors, review submitted questionnaires for completeness, and assess the risks associated with the current design and operational effectiveness of security controls.
- Risk Management: File responses, associated findings, and remediation plans in Disney's systems, and ensure that all risk management activities are properly documented and tracked.
- Reporting and Communication: Draft and review reports for risk assessments and other GRC-related activities, and ensure that all stakeholders are informed and engaged throughout the risk management process.
- Continuous Monitoring: Conduct continuous monitoring of third-party vendors and internal systems to identify potential security risks and vulnerabilities, and ensure that all risk management activities are properly documented and tracked.
Governance, Risk, and Compliance (GRC)
- Cybersecurity Risk and Compliance: Lead and assist in the development of cybersecurity risk and compliance-related strategies to ensure that Disney's cybersecurity risks are properly managed and aligned with the company's risk appetite.
- Compliance Management: Maintain and document compliance with information security-related policies and procedures, and ensure that all regulatory requirements and industry standards are met.
- Education and Communication: Lead the development and delivery of compliance and risk education and ongoing communications to promote a culture of security and compliance within Disney.
- Regulatory Changes: Stay abreast of regulatory changes, new guidelines, technology, and internal policy modifications to identify new key risk areas and ensure that Disney's cybersecurity risks are properly managed.
Competencies and Attributes for Success
- Understanding and Competencies: Outstanding stakeholder management, working understanding of information security-related high-quality practices and requirements, experience in the control of hazard, controls, and compliance, and expertise of hazard evaluation methodologies.
- Personal Attributes: Robust interpersonal abilities, ability to navigate rapid-paced surroundings and be bendy with working hours, fantastic communication abilities, both verbal and written, and adapt speedy to converting conditions and power high-quality change.
Preferred Training and Experience
- Education: Applicable bachelor's or master's diploma from an accepted university or equivalent experience.
- Experience: 4 years of experience throughout third-party risk control, records security, and audit & compliance tracking, with a minimum of 2-3 years in TPRM/internal audit.
- Certifications: Preferred revel in with a massive company and/or large four accounting company, one or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP, and experience in AI/ML is a plus.
Career Growth Opportunities and Learning Benefits
As a Cyber Protection and GRC Specialist at Disney, you will have access to a wide range of career growth opportunities and learning benefits, including:
- Professional Development: Opportunities for professional growth and development, including training and certification programs.
- Mentorship: Access to experienced mentors and coaches who can provide guidance and support.
- Networking: Opportunities to network with other professionals in the field of cybersecurity and GRC.
- Flexible Work Arrangements: Flexible work arrangements, including remote work options.
Work Environment and Company Culture
The Walt Disney Organization is committed to creating a work environment that is inclusive, diverse, and supportive. As a Cyber Protection and GRC Specialist, you will be part of a team that values:
- Innovation: Encouraging innovation and creativity in all aspects of work.
- Collaboration: Fostering collaboration and teamwork across functions and departments.
- Diversity and Inclusion: Valuing diversity and promoting inclusion in all aspects of work.
- Recognition: Recognizing and rewarding outstanding performance and contributions.
Compensation, Perks, and Benefits
The Walt Disney Organization offers a comprehensive compensation package, including:
- Competitive Salary: A competitive salary range of $80,000 per year.
- Benefits: Comprehensive benefits package, including medical, dental, and vision coverage.
- Perks: Additional perks, including flexible work arrangements, professional development opportunities, and access to Disney's employee programs.
Conclusion
If you are a highly skilled and experienced professional in the field of cyber protection and GRC, and are looking for a new challenge that will allow you to make a meaningful contribution to a world-renowned organization, then this is the opportunity for you. Apply now to join the Walt Disney Organization as a Cyber Protection and GRC Specialist and be part of a team that is dedicated to creating magical experiences for audiences around the globe.
Apply Now
Apply Now