Skip to main content

Director, Content Security Engineering

Apply NowApply Later NOTE: We have a new application system, please create a new account if you have not done so yet when applying. Job ID 10009475 Location Burbank, California, United States Business Studios Content Date posted Jul. 28, 2022 Flex Type Hybrid

- This role is considered hybrid, which means the employee will work a portion of their time on-site from a Company designated location and the remainder of their time remotely.

Job Summary:

JOB DESCRIPTION

Director, Content Security

The Walt Disney Studios includes Lucasfilm, Pixar, Walt Disney Animation, 20th Century Studios, Searchlight, Walt Disney Pictures, and Marvel Studios. The Content Security team supports all of these Studios by protecting implementing a multi-facted strategy of consulting, guidance, policy, risk assessments and technical capabilities. 

The Director, Content Security reports into the Vice President of Content Security at The Walt Disney Studios based in Glendale, CA and is responsible for supporting the securing of all creative content produced at the Walt Disney Studios.  The Director, Content Security will oversee the security assessment program which will cover both first party and third-party applications and cloud environments.  Additionally, the Director, Content Security will oversee providing technical consulting and provide guidance on the secure implementation of technology solutions to enable the secure management of Studios’ pre-release content.

Overall responsibilities

  • Develop the strategy and manage key program execution including, but not limited to:
    • Application Security – Support internal development teams who build and engineer mission critical systems
    • 3rd Party Application Security – Oversee and provide security assessment services
    • Influence Engineering Roadmaps – work with development teams (both 1st and 3rd party) to influence their engineering roadmaps to prioritize content protection features and harden and mature features that would benefit Disney Studios’ mission of securing our content
    • Cloud Security – Heavy dependency on AWS.  Implement and oversee robust proactive monitoring and secure configuration program to ensure cloud usage remains secure, is workloads are deployed secure by default and any security deviations are detected and corrected in real time
  • Serve as a Subject Matter Expert providing technical guidance around security best practices encompassing both application and cloud environments, and facilities
  • Provide technical solutions to internal and external business units with an emphasis around secure network architecture, secure storage, secure data centers and hardening best practices
  • Drive the continued improvement of existing program-based documentation (e.g. standards, process, and communications)
  • Development and management of security controls and associated risks
  • Socialize programs internally, including the development of executive-level presentations, and externally with key partners
  • Evaluate and test business processes / controls and identify areas of risk, and develop mitigation plans
  • Oversee day-to-day­­ teams' operation and performance
  • Monitor team performance and report on metrics to the Vice President
  • Lead security programs with an emphasis on digital security, physical security, reliability, information assurance, and related processes
  • Formally define baseline Studio security requirements by leading development of Application, Cloud and Facility Security frameworks
  • Manage all aspects of the evaluation lifecycle, including planning, fieldwork, reporting and archiving
  • Delegate tasks and set project deadlines
  • Apply current knowledge of IT trends and systems processes to identify security and risk management issues and opportunities for improvement
  • Work with internal assurance teams and business unit stakeholders to assess vendor evaluation strategy, cloud strategy, define objectives, and address technology-related controls risks and issues
  • Act as Application / Cloud Information Security subject matter expert to vendors and in-house personnel
  • Develop and deliver training materials and perform general security awareness and specific security technology training
  • Evaluate and recommend new and emerging security products and technologies
  • Willingness to travel up to 25% domestically and internationally

Experience and qualification

  • 10+ years experience executing and then managing technical security and risk functions for large heterogeneous environments
  • 7+ years of experience in Cyber security and/or the following areas: security architecture, security engineering, system and network security, authentication and protocols, cryptography, and application security
  • 4+ years of experience with cloud technologies
  • Advanced knowledge of cloud security and infrastructure environments for top tier cloud providers
  • Prior experience managing diverse and multi-location based technical teams required
  • Prior experience in the entertainment industry preferred
  • CISSP, CISM, or other security certifications preferred

Required skills

  • Broad technical skills in conducting security assessment against established security frameworks (e.g., ISO 17799/27002, PCI, MPAA)
  • Broad technology expertise with application, system integration, data, and/or infrastructure knowledge
  • Strong understanding of secure network principles of perimeter devices, servers, and workstations
    • Working knowledge of configuring and maintaining firewalls and network switching / routing devices (e.g., Palo Alto, Sonicwall, Fortinet, Brocade, Cisco, HP)
    • Network architecture and layer 2 and Layer 3 routing principles
    • Vulnerability scanning, SIEM and common methods of exploiting vulnerabilities
    • Endpoint protection and Data Loss Prevention solutions
    • Secure configuration of Linux, Windows, and Mac based servers and endpoints
    • LAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)
    • Directory Services (e.g., Active Directory, Open Directory, LDAP)
    • Storage solutions (e.g., SAN, NAS, encrypted storage mechanisms)
    • Digital transfer tools (e.g., Aspera, Signiant)
    • OS hardening best practices for both servers and workstations
    • Computer investigation processes and techniques

  • Experience in the following is desired:
  • Knowledge of studio IT systems, including production and post-productions environments
  • Thorough knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)
  • Certifications in one or more of the following desired - AWS, CCNP, CISSP, CISM, CISA, CEH, ITIL, VCP, VCAP
  • Must have extremely strong communication, executive presence and emotional intelligence skills
  • Experience in technical project management/leading large scale technology initiatives
  • Strong negotiation skills


Job-Related Education

  • Bachelor's degree in Computer Science, Information Systems, IT Engineering, or a related field

Master’s in one of the above or MBA desired

About Studios Content:

The Studios Content group encompasses a collection of world-class entertainment studios that produce high-quality cinematic storytelling for both theatrical and streaming release. It is also home to Disney Theatrical Productions, producer of popular stage shows on Broadway and around the world.

About The Walt Disney Company:

The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise with the following business segments: media networks, parks and resorts, studio entertainment, consumer products and interactive media. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney’s stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.

This position is with Walt Disney Pictures, which is part of a business we call Studios Content.

Walt Disney Pictures is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Disney fosters a business culture where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a rapidly changing world.

Apply NowApply Later

Watch Our Jobs

Sign up to receive new job alerts and company information based on your preferences.

For Disney Job Alerts to work, JavaScript must be enabled in your browser.