Principal Application Security Architect
Burbank, CA

Job Description

Job Description

At Disney, we're storytellers. We make the impossible, possible. We do this through utilizing and developing cutting-edge technology and pushing the envelope to bring stories to life through our movies, products, interactive games, parks and resorts, and media networks. Now is your chance to join our talented team that delivers unparalleled creative content to audiences around the world.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

This role is part of the Enterprise Business Systems (EBS) organization. Our mission is to provide business technology solutions for the enterprise that empower growth, and enhance value across brands, geographies and organizations. The Application Support and Operations group is part of the EBS organization. We are responsible for excellence in operating business systems and processes in support of the enterprise. We lead with a culture of continuous improvement, innovation and automation.

We are looking for a security thought leader, passionate about the art and science of application security. We are looking for a practitioner, not a theorist, who will guide Enterprise Business Systems (EBS) through the adoption of security best practices and championing security into every solution across the portfolio of finance, human resources, corporate functions and supply chain systems. Ideally, you began your career in development, building systems/apps and were compelled to protect and defend your products in the face of ever growing threats. Now its time to harness that passion and ensure solutions within the EBS portfolio are secure.

* You will collaborate with the application development community as we modernize and migrate our portfolio into the "cloud," ensuring our systems, services and data are available, performing and protected.
* You will build and implement an application security practice which will be leveraged across the various technologies/development teams, providing for "security by design"
* The ideal candidate will understand and balance business priorities with information security risks and advise stakeholders accordingly.

Your Goal: Help us meet our business objectives quickly and securely.

Job Type

Full Time

Alternate Location-State/Region

WA

Segment

The Walt Disney Company (Corporate)

Category

Technology

Basic Qualifications

* 10+ years in Information Technology
* 5+ years experience in secure application development
* 3+ years of practical application development experience in an agile / DevOps environment
* 3+ years experience architecting for various hosting options (XaaS, on-prem, etc)
* Experience in information technology security design and implementation
* Demonstrated experience in creating conceptual, logical and physical security diagrams
* Must have expertise in secure software development.
* Must have "full stack" application knowledge, with expertise in agile application development and at least one other area: Infrastructure, Data Modeling, Business Logic, User Experience
* Must have expertise in architecting cloud solutions
* CISSP
* Certified ScrumDeveloper

Critical Competencies for Success

Leadership Skills:

* A self-starter, who is capable of navigating a complex organizational structure, managing teams through influence and direct line management.
* Ability to establish some executive and many manager level relationships across the various business and technology providers within TWDC.
* Establish and manage effective working relationships in a matrix environment with other departments, groups and staff with whom work must be coordinated or interfaced.
* A person that can decide and act within the policies and guidelines and seeks guidance from leadership for areas of differentiation.

Execution Skills:

* A proven track record of execution, the candidate must be able to define the Application Security technical roadmap ensuring the desired outcomes are tied to business needs.
* Technical acumen and experience in implementing secure business technology, including finance, human capital management, logistics, supply chain and corporate functions.
* A "working Architect" who gets into the details and is experienced in managing multiple medium to large scale initiatives and cross functional teams.
* Equally comfortable with senior manager-level stakeholders, architects and developers--this is a hands-on position with regards to managing resources and details.
* Ability to identify and marshal resources (people, funding, support) to get projects initiated and completed.
* Ability to influence a significant transformation in the security practices across business technology platforms.
* Detailed knowledge of Security Architecture principles and ability to lead a team of Security Specialists in the development of capability roadmaps.
* Conversant in the enterprise technology landscape and ability to leverage that knowledge in delivering business outcomes with speed.
* Understands the principles and practices of Security Architecture and can effectively proceed through review boards activities.

Business

The Walt Disney Company (Corporate)

Required Education

* Bachelor's Degree in Computer Science, Information Security, Engineering, or related technical field

Preferred Qualifications

* 5+ years supporting Enterprise-level applications
* SAP ECC is beneficial
* SAP HANA is highly desirable
* CCSP
* Certified ScrumProfessional
* AWS Certified Public Cloud Architect MCSE cloud, VMWare VCP6 cloud, EMCCA cloud computing

Postal Code

91502

Preferred Education

* MBA or Masters in a technical field would be beneficial

Job Description

At Disney, we're storytellers. We make the impossible, possible. We do this through utilizing and developing cutting-edge technology and pushing the envelope to bring stories to life through our movies, products, interactive games, parks and resorts, and media networks. Now is your chance to join our talented team that delivers unparalleled creative content to audiences around the world.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

This role is part of the Enterprise Business Systems (EBS) organization. Our mission is to provide business technology solutions for the enterprise that empower growth, and enhance value across brands, geographies and organizations. The Application Support and Operations group is part of the EBS organization. We are responsible for excellence in operating business systems and processes in support of the enterprise. We lead with a culture of continuous improvement, innovation and automation.

We are looking for a security thought leader, passionate about the art and science of application security. We are looking for a practitioner, not a theorist, who will guide Enterprise Business Systems (EBS) through the adoption of security best practices and championing security into every solution across the portfolio of finance, human resources, corporate functions and supply chain systems. Ideally, you began your career in development, building systems/apps and were compelled to protect and defend your products in the face of ever growing threats. Now its time to harness that passion and ensure solutions within the EBS portfolio are secure.

* You will collaborate with the application development community as we modernize and migrate our portfolio into the "cloud," ensuring our systems, services and data are available, performing and protected.
* You will build and implement an application security practice which will be leveraged across the various technologies/development teams, providing for "security by design"
* The ideal candidate will understand and balance business priorities with information security risks and advise stakeholders accordingly.

Your Goal: Help us meet our business objectives quickly and securely.

Basic Qualifications

* 10+ years in Information Technology
* 5+ years experience in secure application development
* 3+ years of practical application development experience in an agile / DevOps environment
* 3+ years experience architecting for various hosting options (XaaS, on-prem, etc)
* Experience in information technology security design and implementation
* Demonstrated experience in creating conceptual, logical and physical security diagrams
* Must have expertise in secure software development.
* Must have "full stack" application knowledge, with expertise in agile application development and at least one other area: Infrastructure, Data Modeling, Business Logic, User Experience
* Must have expertise in architecting cloud solutions
* CISSP
* Certified ScrumDeveloper

Critical Competencies for Success

Leadership Skills:

* A self-starter, who is capable of navigating a complex organizational structure, managing teams through influence and direct line management.
* Ability to establish some executive and many manager level relationships across the various business and technology providers within TWDC.
* Establish and manage effective working relationships in a matrix environment with other departments, groups and staff with whom work must be coordinated or interfaced.
* A person that can decide and act within the policies and guidelines and seeks guidance from leadership for areas of differentiation.

Execution Skills:

* A proven track record of execution, the candidate must be able to define the Application Security technical roadmap ensuring the desired outcomes are tied to business needs.
* Technical acumen and experience in implementing secure business technology, including finance, human capital management, logistics, supply chain and corporate functions.
* A "working Architect" who gets into the details and is experienced in managing multiple medium to large scale initiatives and cross functional teams.
* Equally comfortable with senior manager-level stakeholders, architects and developers--this is a hands-on position with regards to managing resources and details.
* Ability to identify and marshal resources (people, funding, support) to get projects initiated and completed.
* Ability to influence a significant transformation in the security practices across business technology platforms.
* Detailed knowledge of Security Architecture principles and ability to lead a team of Security Specialists in the development of capability roadmaps.
* Conversant in the enterprise technology landscape and ability to leverage that knowledge in delivering business outcomes with speed.
* Understands the principles and practices of Security Architecture and can effectively proceed through review boards activities.

Required Education

* Bachelor's Degree in Computer Science, Information Security, Engineering, or related technical field

Preferred Qualifications

* 5+ years supporting Enterprise-level applications
* SAP ECC is beneficial
* SAP HANA is highly desirable
* CCSP
* Certified ScrumProfessional
* AWS Certified Public Cloud Architect MCSE cloud, VMWare VCP6 cloud, EMCCA cloud computing

Preferred Education

* MBA or Masters in a technical field would be beneficial

Responsibilities

The Principal Application Security Architect is one of the key architect roles in the organization. This is a highly technical role and requires an agile, "full stack" thinker. The ideal candidate will skillfully balance security best practices against business drivers, with an evaluation of risk and cost. This role is responsible for:

* Developing and implementing application security best practices, frameworks and reusable services across the 200+ Enterprise Business systems of the Walt Disney Company, encompassing finance, human resources, corporate functions and supply chain.
* Envisioning and delivering an application security strategic roadmap, in collaboration with senior staff members and management across EBS.
* Partnering with the Solution Architecture & Global Information Security communities to produce systems which are are secure and compliant across the EBS portfolio.
* Translating technology and risk concepts when interacting with internal and external customers on security-related topics and operational tasks.
* Providing security expertise and technical leadership while collaborating with program managers, engineers, developers, testers and all levels of management to execute on strategic and tactical goals.