The Sr Manager, Content Security Engineering reports into the Director of Content Security at The Walt Disney Studios based in Glendale, CA and is responsible for the management of the 3rd party Site Security assessment program. The modern filmmaking process is highly complex with dependencies on an entire eco-system of 3rd party strategic partners, suppliers and vendors. This program provides assessment, consulting and advisory services to ensure the entire supply chain remains robust and resilient and allows The Walt Disney Studios' to securely create films, features and series seen across the world.
Overall Responsibilities

• Develop strategy and manage the 3rd Party Site Security program
• Serve as a Subject Matter Expert (SME) providing technical guidance around security best practices encompassing both digital and physical controls
• Provide technical solutions to internal and external business units with an emphasis around secure network architecture and hardening best practices
• Drives the continued improvement of existing program-based documentation (e.g. standards, process, and communications)
• Development and management of security controls and associated risks
• Socialize program internally, including the development of executive-level presentations, and externally with key partners

Specific Responsibilities

• Lead security program with an emphasis on content, digital and physical security
• Formally define baseline Studio Content Security requirements by leading development of the Site Security control framework
• Manage all aspects of the evaluation lifecycle, including planning, fieldwork, reporting and archiving
• Evaluate and test business processes / controls and identify areas of risk, and develop mitigation plans
• Oversee the team's day-to-day­­ operation and performance
• Monitor team performance and report on metrics to the Director
• Delegate tasks and set project deadlines
• Provide high quality, comprehensive and accurate reports that detail the security posture of 3rd parties who receive and handle Disney content
• Work with internal assurance teams and business unit stakeholders to assess vendor evaluation strategy, cloud strategy, define objectives, and address technology-related controls risks and issues
• Develop and deliver training materials and perform general security awareness and specific security technology training
• Evaluate and recommend new and emerging security products and technologies
• Willingness to travel up to 25% domestically and internationally

Experience and Qualification

• 7+ years of experience in information security and/or the following areas: security architecture, security engineering, system and network security, authentication and protocols, cryptography, and application security
• 5+ years of experience with cloud technologies
• Advanced knowledge of cloud security and infrastructure environments for top tier cloud providers (AWS, Azure, GCP)
• Prior experience in an architecture, development, engineering, or senior technical role
• Prior experience in the entertainment industry preferred
• Ability to work in a highly distributed matrixed environment
• Ability to adapt to new technologies and trends

Required Skills

• Broad technical skills in conducting security assessments
• Broad technology expertise with application, system integration, data, and/or infrastructure knowledge
• Strong understanding of secure network principles of perimeter devices, servers, and workstations
• Working knowledge of configuring and maintaining firewalls and network switching / routing devices (e.g., Palo Alto, Sonicwall, Fortinet, Brocade, Cisco, HP)
• Network architecture and layer 2 and Layer 3 routing principles
• Vulnerability scanning, SIEM and common methods of exploiting vulnerabilities
• Endpoint protection and Data Loss Prevention solutions
• Secure configuration of Linux, Windows, and Mac based servers and endpoints
• LAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)
• Wireless authentication standards (802.1x)
• Directory Services (e.g., Active Directory, Open Directory, LDAP)
• Storage solutions (e.g., SAN, NAS, encrypted storage mechanisms)
• Digital transfer tools (e.g., Aspera, Signiant)
• OS hardening best practices for both servers and workstations
• Computer investigation processes and techniques
• Experience in the following are desired:
  
  • Knowledge of studio IT systems, including production and post-productions environments
  • Knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)
• Must have strong communication (written and verbal, including presentation) and listening skills
• Experience in technical project management/leading large scale technology initiatives
• Strong analytical, organizational and decision-making skills
• Strong negotiation skills

Education
Bachelor's degree in Computer Science, Information Systems, IT Engineering, or a related field
CISSP, CISA/CISM, or CEH designations desired
The hiring range for this position in California is $164,492 to $220,660 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
DISNEYTECH
#LI-AS3