Senior Security Specialist ensuring compliance and security measures at Disney. Supporting audit processes and collaborating on risk assessments to enhance cybersecurity.
Responsibilities
Independent audit support for: SOX 404 ITGCs, PII, PCI, ISPS
Perform control health checks and remediation testing procedures to address issues identified via audit assessments, internal or external audits, and/or other assessments.
Participate in audit walkthrough meetings to gain operational comfort in the design of the Company’s automated controls.
Participate in Audit Readiness efforts to ensure proper system scoping and respective ITGCs, control validations and timely program onboarding
Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment
Execute control finding investigation and record in internal SOCD/SAD
Provide requirements input to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands.
Provide program status updates to management
Primary liaison between external/internal auditors and tech organization and ensure proper audit evidence is delivered to auditors
Work with management and internal audit on maintaining the master Risk and Control Matrix over the systems
Collaborate with engineers on designing controls in their environment
Requirements
Minimum of 5+ years of IT SOX experience and proven experience in supporting IT audit/compliance functions
Thorough understanding of SOX ITGC, PCI and ICFR 404 standards and audit objectives
Interpersonal skills with the ability to work with teams cross-functionally
Strong verbal and written communication skills
Ability to effectively communicate to technical and non-technical audiences
Highly organized and efficient
Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
Benefits
A bonus and/or long-term incentive units may be provided as part of the compensation package
Full range of medical, financial, and/or other benefits, dependent on the level and position offered
Loss Prevention Agent responsible for security and loss prevention in logistics facilities. Ensuring safety and protection of property, clients, employees, and guests within the workspace.
Analyst Relations Manager shaping market understanding of Upwind's innovative cloud and AI security platform. Leading relationships with industry analysts to enhance visibility, credibility, and category leadership.
Sr Network Security Engineer designing security architectures and leading security initiatives for RBC. Collaborating across teams to deliver multi - layered security solutions and mentoring team members in engineering best practices.
Senior Threat Modeller enhancing cybersecurity threat modeling for RBC. Collaborating with diverse teams to improve and implement secure by design principles across the enterprise.
Senior Security Engineer supporting security engineering and SIEM administration at Ardent. Focused on improving threat detection and response within vSOC environments in Washington, D.C.
Mainframe Support Engineer ensuring stability and performance of enterprise mainframe systems. Troubleshooting complex issues and collaborating with development, operations, and security teams for optimal system management.
IAM / IGA Security Engineer designing and implementing identity governance solutions. Collaborating with Security, IT, HR, and business stakeholders to ensure secure access governance.
Senior Consultant helping the Ministry of Defence with large - scale ICT projects and innovations in technology and security. Lead developments in networks and applications in cooperation with Defence Architects.
Software Security Engineer at Spectro Cloud focusing on securing Kubernetes - based platforms for AI infrastructure. Responsible for implementing security controls and managing incident responses across the platform.
Lead Information Security initiatives at Starling, the UK's leading digital bank. Manage policy frameworks, team performance, and ensure compliance with security standards.