VP, Information Security, Studios

Job Summary:

The Studios Content group encompasses a collection of world-class entertainment studios that produce high-quality cinematic storytelling for both theatrical and streaming release. The VP Information Security, Studios provides the direction and strategy for protecting the confidentiality and integrity of TWDC Studios systems and related infrastructure ensuring that a comprehensive cybersecurity program is effectively managed by leveraging industry best practices to protect and prevent cyber threats based upon business criticality.

Responsibilities:

• Designs, builds and implements a Studios information security management program in accordance with TWDC Information Security Policies & Standards and in alignment with Studios business priorities
• Provides strategic leadership of Studios information security program, coordinating information security standards and compliance across all Studios segments
• Provides clear, concise metrics, analytics and reporting of Studios risk posture to executive stakeholders
• Serves as the strategic information security risk advisor to the Studios CTO and other key Studios technical and business leaders
• Evaluates Studios information security risk in accordance with TWDC’s enterprise-wide information security strategy to develop an annual information security management plan specific to Studios
• Establishes key performance indicators and proactively reports to Studios executive stakeholders on performance of information security activities and metrics, and related risk posture
• Maintains Studios information security management program in accordance with Disney enterprise and Media & Entertainment industry requirements

1. Ensures Studios information security program is integrated with Studios IT system planning, development and acquisition lifecycle
2. Leads Studios information security-related workflow mapping and related policy and procedural documentation management
3. Monitors and ensure compliance with Studios information security program by employees, non-employees and third parties
4. Ensures individual accountable for controls are implementing, testing and remediation any control failures effectively

• Manages Studios information security staff in a direct and matrix team structure, and provides leadership to support complex and ever-evolving operational requirements
• Leads Studios change management, vulnerability management, application security and cloud platform security activities in close collaboration with enterprise security teams, ensuring clear and measurable security requirements are available and a clear assessment methodology is in place to allow consistent compliance verification for across all environments
• Represents the Studio organization’s security compliance interests in all matters: with partners, suppliers, and industry associations to ensure the bi-directional flow of technical information and best practices in the area of information security
• Regularly evaluates, reviews and reports on the effectiveness of Studios information security management program
• As a key member of the TWDC Information Security Executive Leadership Team:

1. Leads Studios internal and third-party assessment programs, ensuring that the level of effort for each assessment is commensurate with the sensitivity of information and/or content to be shared
2. Provides expert-level analysis of alternatives, design and implementation plans, and recommendations supported by strong research skills and provided through strong communication skills
3. Supervises and reviews updates to information security policies, architecture, standards, and/or other technical documents
4. Stays abreast of latest industry developments in information security
5. Drives innovation of security programs and underlying process and solutions to stay ahead of the threat landscape

Basic Qualifications:

• 15+ years of relevant experience in information security or directly related field
• Proven ability to manage and facilitate annual operating budget and strategic planning
• Demonstrated ability to manage the day-to-day tasks of diverse teams, while effectively influencing senior management on key decisions and direction
• Proven ability to inspire, motivate and lead a team to produce quality work in the development of solutions
• Demonstrated inclusive leadership that embraces diversity
• Demonstrated ability to connect and influence others in order to achieve organizational priorities
• Proven ability to successfully operate in a highly-matrixed organizational system where partnership and influence are key drivers of success
• Demonstrated experience leading large organization-wide security initiatives
• Demonstrated ability to develop teams and mentor staff
• Demonstrated ability to develop geographically and otherwise diverse highly technical teams
• Ability to communicate effectively to executive leadership in both business and technology roles
• Demonstrated exceptional critical thinking, strategic planning, and process management skills
• Proven results in delivering creative and innovative business and technology solutions
• Excellent written and verbal communication skills
• Excellent presentation and group dynamics skills
• Strong familiarity with information security, risk management, and IT governance standards and frameworks (e.g., NIST 800-53, ISO 27000, ISO 31000, etc.)
• Experience in formal risk assessment and risk management practices
• Experience with vulnerability analysis processes and best practices
• Experience managing third-party risk, business continuity risk, and IT operational risk
• Experience establishing and managing control inventories and performing effectiveness reviews
• Experience in Media and Entertainment or related companies
• Proven executive leadership within a complex organization holding a high profile global brand
• Demonstrated excellence in client/partner relationship management with senior executives
• Excellent orientation to both the details and the bigger picture
• Solid business acumen with a high level of integrity and dependability
• Proactive at finding solutions to complex problems
• Action oriented with high standard for quality and performance

Required Education

• Bachelor’s degree or equivalent required; Advanced degree is a plus
• Certifications in one of more of the following – CISSP, CISM, CISA, CPP, CRISC, CEH, ITIL

About The Walt Disney Studios:

For over 95 years, The Walt Disney Studios has been the foundation on which The Walt Disney Company was built. Today it brings quality movies, episodic storytelling, music, and stage plays to consumers throughout the world. The Walt Disney Studios encompasses a collection of respected film studios, including Disney, Walt Disney Animation Studios, Pixar Animation Studios, Marvel Studios, Lucasfilm, 20th Century Studios, and Searchlight Pictures. It is also home to Disney Theatrical Productions, producer of world-class stage shows.

About The Walt Disney Company:

The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise with the following business segments: media networks, parks and resorts, studio entertainment, consumer products and interactive media. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney’s stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.

This position is with Disney Worldwide Services, Inc., which is part of a business we call The Walt Disney Studios.

Disney Worldwide Services, Inc. is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Disney fosters a business culture where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a rapidly changing world.