Security Specialist at Disney focusing on IT audit compliance and cybersecurity risk management. Supporting enterprise technology solutions and ensuring the security of information systems.
Responsibilities
Independent audit support for: SOX 404 ITGCs PII PCI ISPS
Perform control health checks and remediation testing procedures to address issues identified via audit assessments, internal or external audits, and/or other assessments
Participate in audit walkthrough meetings to gain operational comfort in the design of the Company’s automated controls
Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment
Perform control finding investigation and record in internal SOCD/SAD
Provide requirements input to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands
Provide program status updates to management
Work with stakeholders to obtain audit evidence
Requirements
Minimum of 3 years of IT SOX experience and proven experience in supporting IT audit/compliance functions
Thorough understanding of SOX ITGC and ICFR 404 standards and audit objectives
Interpersonal skills with the ability to work with teams cross-functionally
Strong verbal and written communication skills
Ability to effectively communicate to technical and non-technical audiences
Highly organized and efficient
Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
Experience and knowledge of NIST framework, ISO 27001, K-ISMS, GDPR (preferred)
Experience working with companies that have a heavy microservice architecture (preferred)
Benefits
A bonus and/or long-term incentive units may be provided as part of the compensation package
Full range of medical, financial, and/or other benefits
Program Manager driving strategic alignment and overseeing enterprise - wide transformation programs at St Vincent's Health Australia. Leading cross - functional teams and ensuring programs deliver value within scope and timelines.
Cloud Security Architect shaping security architecture for scalable cloud solutions at GRAYOAK. Collaborating with cross - functional teams to ensure secure software development and architecture.
Cloud Security Specialist ensuring the security of customer services and infrastructure in cloud platforms. Implementing monitoring tools and enhancing security policies for clients’ cloud environments.
Information Systems Security Officer for federal programs, managing security and compliance in IT. Assessing risks and delivering training to enhance cybersecurity practices.
Distinguished Engineer for AI & Product Security at Workday, driving security strategy for AI technologies and cloud - native applications. Leading security architecture and complex reviews across critical products.
Hands - on Security Engineer working across multiple layers for a cloud procurement platform. Ensuring security while developing automated workflows in a global team environment.
Lead Cyber Security Engineer at GE Vernova focusing on cybersecurity for EHV/HV substations. Involved in system protection, risk assessments, and cross - functional collaboration.
Lead Cyber Security Engineer at GE Vernova designing and implementing crucial cybersecurity measures. Involved in developing renewables project worldwide in a dynamic engineering team.
Information Security Representative/OT Engineer ensuring compliance with ISO standards in OT systems and supporting energy transition. Collaborate in diverse teams for modern, sustainable energy solutions.
Functional Safety Specialist in projects for functional safety within automation technology. Collaborating with clients on safety analyses and documentation while fostering team development in a flexible environment.