Manager - Pen Testing Operations

Department Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.

• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

• Strengthen the business through optimizing execution, application, and technology used to protect the Company.

• Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

The Product Security team exists to ensure that our guests are protected and have a magical experience. We protect our guests and the Disney brand by engaging with product development teams at every step of the product development lifecycle. We assess and influence product design, we analyze applications for flaws that may lead to security issues, and we provide penetration testing to ensure our products are secure.

We are looking to add people to our team who are focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work.

We Are Hiring! We are adding a Manager, Pen Testing Operations to help lead our Team!

This role will report to the Sr. Manager overseeing Pen Testing and Continuous Testing Services. Our mission is to continuously assess, challenge, and strengthen our organization’s security through innovative automated solutions and expert manual testing, ensuring resilience and enabling confident business growth.

Responsibilities of Role:

• Lead and manage a team of security specialists and engineers.

• Align with leadership to drive the strategic direction of the penetration testing program.

• Collaborate with team to align Pen Testing processes across all business segments and manage intake, scheduling and reporting.

• Collaborate with engineering, product, and compliance teams to integrate security into development workflows.

• Coordinate with third-party vendors and internal teams for assessments and tool adoption.

• Provide guidance and mentorship to junior team members.

Must Haves:

• Minimum of 8 years of related work experience; 3+ years in management.

• Minimum of 5+ years of program management experience, including some experience in managing personnel.

• Knowledge of penetration testing methodologies and familiarity with tooling.

• Ability to define and deliver security metrics, dashboards, and executive-level reporting.

• Excellent communication skills for engaging with engineering, product, compliance, and executive teams.

• Understanding of Agile technical practices, DevOps and testing concepts (CI/CD, TDD).

• Process Optimization experience resulting in streamlined and efficient processes across programs and teams.

• Demonstrated ability to identify, understand and drive resolution of complex critical issues.

• Ability to translate technical findings into business-impact narratives and actionable recommendations.

• Prior experience with Jira, Confluence and Miro for workflow and documentation integration.

Nice To Haves:

• Exposure to Red Teaming, Threat Modeling, and Attack Simulation frameworks.

• Experience working in globally distributed environments.

• Comfort working in fast-paced, dynamic environments with shifting priorities

Education:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

#DISNEYTECH

.

The hiring range for this position in Burbank, CA is $155,700 - $208,700 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.