Disney Parks And Resorts
Director, Content Security Engineering
Disney Parks And Resorts, Glendale, California, us, 91222
Job Summary:
Check below to see if you have what is needed for this opportunity, and if so, make an application asap.Director, Content Security EngineeringThe Walt Disney Studios includes Lucasfilm, Pixar, Walt Disney Animation, 20th Century Studios, Searchlight, Walt Disney Pictures, and Marvel Studios. The Content Security team supports these Studios by protecting and implementing a multi-faceted strategy of consulting, guidance, policy, risk assessments and technical capabilities.The Director, Content Security reports into the Vice President of Content Security at The Walt Disney Studios based in Glendale, CA and is responsible for supporting the securing of all creative content produced at the Walt Disney Studios. The Director, Content Security Engineering will oversee the security assessment program which will cover both first-party and third-party applications and cloud environments. Additionally, the Director, Content Security Engineering will oversee providing technical consulting and provide guidance on the secure implementation of technology solutions to enable the secure management of Studios' pre-release content.Overall responsibilitiesDevelop the strategy and manage key program execution including, but not limited to:
Application Security - Support internal development teams who build and engineer mission critical systems3rd Party Application Security - Oversee and provide vendor security assessment servicesInfluence Engineering Roadmaps - work with development teams (both 1st and 3rd party) to influence their engineering roadmaps to prioritize content protection features and harden and mature existing features that would benefit Disney Studios' mission of securing our contentCloud Security - Heavy dependency on AWS. Implement and oversee robust proactive monitoring and secure configuration program to ensure cloud usage remains secure, is workloads are deployed secure by default and any security deviations are detected and corrected in real time
Serve as a Subject Matter Expert providing technical guidance around security best practices encompassing applications, cloud infrastructure, and facilitiesPartner with other internal security teams to deliver application security services that cover the entire Disney Studios application portfolioProvide technical solutions, consulting, and recommendations to internal and external business units with an emphasis around secure network architecture, secure storage, secure data centers and hardening best practicesDrive the continued improvement of existing program-based documentation (e.g. standards, process, and communications)Socialize security programs and initiatives internally and externally, including the development and delivery of executive-level presentationsEvaluate and test business processes / controls and identify areas of risk, and develop mitigation plansOversee day-to-day teams' operation and performanceMonitor team performance and report on metrics to the Vice PresidentLead security programs with an emphasis on digital security, physical security, reliability, information assurance, and related processesFormally define baseline Studio security requirements by leading development of Application, Cloud and Facility Security frameworksManage all aspects of the evaluation lifecycle, including planning, fieldwork, reporting and archivingDelegate tasks and set project deadlinesApply current knowledge of IT trends and systems processes to identify security and risk management issues and opportunities for improvementWork with internal assurance teams and business unit stakeholders to assess vendor evaluation strategy, cloud strategy, define objectives, and address technology-related controls risks and issuesAct as Application / Cloud Security subject matter expert to vendors and in-house personnelDevelop and deliver training materials and perform general security awareness and specific security technology trainingEvaluate and recommend new and emerging security products and technologiesWillingness to travel up to 25% domestically and internationallyExperience and qualification10+ years experience executing and then managing technical security assessment and risk functions for large heterogeneous environments7+ years of experience in information security with emphasis in the following areas: security architecture, security engineering, system and network security, authentication and protocols, cryptography, and application security4+ years of experience with cloud technologiesAdvanced knowledge of cloud security and infrastructure environments for top tier cloud providersPrior experience managing diverse and multi-location based technical teams requiredPrior experience in the entertainment industry preferredCISSP, CISM, or other security certifications preferredRequired skillsBroad technical skills in conducting security assessment against established security frameworks (e.g., ISO 17799/27002, PCI, MPAA)Extremely strong communication, executive presence and emotional intelligence skillsStrong ability to convey technical issues to a less technical audienceStrong knowledge of common application vulnerabilities, with a proven track record of partnering with implementation teams on remediationBroad technology expertise with application, system integration, data, infrastructure, and device management knowledgeUnderstanding of identity and access management fundamentals, including SSO protocols and multi-factor authentication solutionsStrong understanding of secure network principles of perimeter devices, servers, and workstationsLAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)Directory Services (e.g., Active Directory, Open Directory, LDAP)Storage solutions (e.g., SAN, NAS, encrypted storage mechanisms)Digital transfer tools (e.g., Aspera, Signiant)OS hardening best practices for both servers and workstationsUnderstanding of incident investigation processes and techniquesDesired skillsKnowledge of studio IT systems, including production and post-productions environmentsThorough knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)Understand the security considerations of systems that leverage AI/ML, including generative AIExperience working with or assessing media specific systems and content protection solutions (DRM, watermarking, encryption, streaming protocols, etc.)Certifications in one or more of the following desired - AWS, CCNP, CISSP, CISM, CISA, GIAC, CEH, ITIL, VCP, VCAPExperience in technical project management/leading large scale technology initiativesStrong negotiation skillsJob Related EducationBachelor's degree in computer science, Information Systems, IT Engineering, or a related fieldMasters in one of the above or MBA desiredThe hiring range for this position in Glendale, CA is $180,700.00 to $242,300.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.About The Walt Disney Studios:For over 95 years, The Walt Disney Studios has been the foundation on which The Walt Disney Company was built. Today it brings quality movies, episodic storytelling, music, and stage plays to consumers throughout the world. The Walt Disney Studios encompasses a collection of respected film studios, including Disney, Walt Disney Animation Studios, Pixar Animation Studios, Marvel Studios, Lucasfilm, 20th Century Studios, and Searchlight Pictures. It is also home to Disney Theatrical Productions, producer of world-class stage shows.About The Walt Disney Company:The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise that includes three core business segments: Disney Entertainment, ESPN, and Disney Experiences. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney's stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.This position is with Walt Disney Pictures, which is part of a business we call The Walt Disney Studios.Walt Disney Pictures is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, religion, color, sex, sexual orientation, gender, gender identity, gender expression, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information or disability, or any other basis prohibited by federal, state or local law. Disney champions a business environment where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a constantly evolving world.
#J-18808-Ljbffr
Check below to see if you have what is needed for this opportunity, and if so, make an application asap.Director, Content Security EngineeringThe Walt Disney Studios includes Lucasfilm, Pixar, Walt Disney Animation, 20th Century Studios, Searchlight, Walt Disney Pictures, and Marvel Studios. The Content Security team supports these Studios by protecting and implementing a multi-faceted strategy of consulting, guidance, policy, risk assessments and technical capabilities.The Director, Content Security reports into the Vice President of Content Security at The Walt Disney Studios based in Glendale, CA and is responsible for supporting the securing of all creative content produced at the Walt Disney Studios. The Director, Content Security Engineering will oversee the security assessment program which will cover both first-party and third-party applications and cloud environments. Additionally, the Director, Content Security Engineering will oversee providing technical consulting and provide guidance on the secure implementation of technology solutions to enable the secure management of Studios' pre-release content.Overall responsibilitiesDevelop the strategy and manage key program execution including, but not limited to:
Application Security - Support internal development teams who build and engineer mission critical systems3rd Party Application Security - Oversee and provide vendor security assessment servicesInfluence Engineering Roadmaps - work with development teams (both 1st and 3rd party) to influence their engineering roadmaps to prioritize content protection features and harden and mature existing features that would benefit Disney Studios' mission of securing our contentCloud Security - Heavy dependency on AWS. Implement and oversee robust proactive monitoring and secure configuration program to ensure cloud usage remains secure, is workloads are deployed secure by default and any security deviations are detected and corrected in real time
Serve as a Subject Matter Expert providing technical guidance around security best practices encompassing applications, cloud infrastructure, and facilitiesPartner with other internal security teams to deliver application security services that cover the entire Disney Studios application portfolioProvide technical solutions, consulting, and recommendations to internal and external business units with an emphasis around secure network architecture, secure storage, secure data centers and hardening best practicesDrive the continued improvement of existing program-based documentation (e.g. standards, process, and communications)Socialize security programs and initiatives internally and externally, including the development and delivery of executive-level presentationsEvaluate and test business processes / controls and identify areas of risk, and develop mitigation plansOversee day-to-day teams' operation and performanceMonitor team performance and report on metrics to the Vice PresidentLead security programs with an emphasis on digital security, physical security, reliability, information assurance, and related processesFormally define baseline Studio security requirements by leading development of Application, Cloud and Facility Security frameworksManage all aspects of the evaluation lifecycle, including planning, fieldwork, reporting and archivingDelegate tasks and set project deadlinesApply current knowledge of IT trends and systems processes to identify security and risk management issues and opportunities for improvementWork with internal assurance teams and business unit stakeholders to assess vendor evaluation strategy, cloud strategy, define objectives, and address technology-related controls risks and issuesAct as Application / Cloud Security subject matter expert to vendors and in-house personnelDevelop and deliver training materials and perform general security awareness and specific security technology trainingEvaluate and recommend new and emerging security products and technologiesWillingness to travel up to 25% domestically and internationallyExperience and qualification10+ years experience executing and then managing technical security assessment and risk functions for large heterogeneous environments7+ years of experience in information security with emphasis in the following areas: security architecture, security engineering, system and network security, authentication and protocols, cryptography, and application security4+ years of experience with cloud technologiesAdvanced knowledge of cloud security and infrastructure environments for top tier cloud providersPrior experience managing diverse and multi-location based technical teams requiredPrior experience in the entertainment industry preferredCISSP, CISM, or other security certifications preferredRequired skillsBroad technical skills in conducting security assessment against established security frameworks (e.g., ISO 17799/27002, PCI, MPAA)Extremely strong communication, executive presence and emotional intelligence skillsStrong ability to convey technical issues to a less technical audienceStrong knowledge of common application vulnerabilities, with a proven track record of partnering with implementation teams on remediationBroad technology expertise with application, system integration, data, infrastructure, and device management knowledgeUnderstanding of identity and access management fundamentals, including SSO protocols and multi-factor authentication solutionsStrong understanding of secure network principles of perimeter devices, servers, and workstationsLAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)Directory Services (e.g., Active Directory, Open Directory, LDAP)Storage solutions (e.g., SAN, NAS, encrypted storage mechanisms)Digital transfer tools (e.g., Aspera, Signiant)OS hardening best practices for both servers and workstationsUnderstanding of incident investigation processes and techniquesDesired skillsKnowledge of studio IT systems, including production and post-productions environmentsThorough knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)Understand the security considerations of systems that leverage AI/ML, including generative AIExperience working with or assessing media specific systems and content protection solutions (DRM, watermarking, encryption, streaming protocols, etc.)Certifications in one or more of the following desired - AWS, CCNP, CISSP, CISM, CISA, GIAC, CEH, ITIL, VCP, VCAPExperience in technical project management/leading large scale technology initiativesStrong negotiation skillsJob Related EducationBachelor's degree in computer science, Information Systems, IT Engineering, or a related fieldMasters in one of the above or MBA desiredThe hiring range for this position in Glendale, CA is $180,700.00 to $242,300.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.About The Walt Disney Studios:For over 95 years, The Walt Disney Studios has been the foundation on which The Walt Disney Company was built. Today it brings quality movies, episodic storytelling, music, and stage plays to consumers throughout the world. The Walt Disney Studios encompasses a collection of respected film studios, including Disney, Walt Disney Animation Studios, Pixar Animation Studios, Marvel Studios, Lucasfilm, 20th Century Studios, and Searchlight Pictures. It is also home to Disney Theatrical Productions, producer of world-class stage shows.About The Walt Disney Company:The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise that includes three core business segments: Disney Entertainment, ESPN, and Disney Experiences. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney's stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.This position is with Walt Disney Pictures, which is part of a business we call The Walt Disney Studios.Walt Disney Pictures is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, religion, color, sex, sexual orientation, gender, gender identity, gender expression, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information or disability, or any other basis prohibited by federal, state or local law. Disney champions a business environment where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a constantly evolving world.
#J-18808-Ljbffr