Job Summary:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

Secure the Magic by protecting information systems and platforms.Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.Strengthen the business through optimizing execution, application, and technology used to protect the Company.Innovate by investing in core capabilities to enhance operational efficiency.

Responsibilities of Role:

The first line of defense against cyber threats comes down to each and every individual employee at TWDC. As the Cybersecurity Awareness Education Lead, you will play a vital role in educating the Company on cybersecurity priorities and initiatives. This role will lead the development and maintenance of a robust cybersecurity training & awareness program that spans general and business/role specific cybersecurity best practices as it relates to the unique businesses of TWDC.

Program DevelopmentDesign and develop cybersecurity training materials aligned to the organization’s security policies, goals, regulatory and business requirementsContent creation and customization through various mediums (training modules, presentations, reference guides, etc.)Collaborate with business and employee communications partners to strategize ongoing cybersecurity awareness campaigns and educational materialDistribute training materials through various delivery means to best suit intended audience and target content awareness based on urgency (in-person training, webinars, training modules, etc.), working in collaboration with learning and employee communications partnersEstablish an awareness community of practice resource to provide all employees with access to training materialsAwareness ResponsibilitiesLead Cybersecurity Awareness Month strategyMaintain GIS internal websiteSupport Incident Response and Phishing Simulation campaigns with awareness and response communicationsWork closely with enterprise employee communications on internal marketing of all campaignsReporting & MetricsMonitor and report on training compliance and overall program effectivenessRegularly assess effectiveness and relevance of training material for updatesMaintain current understanding of cybersecurity trends, regulations, and technologies to continuously improve the training & awareness program

Must Haves:

BA/BS degree5+ years of experience developing educational materials and programsStrong interpersonal skills with the ability to work with teams cross-functionallyEffective communication skills for explaining concepts to technical and non-technical audiences including developers and tech operators with a demonstrated ability to take highly technical processes and make them easily understandable by the general employee populationDemonstrated ability to manage multiple priorities with strong organizational and time management skillsProject Management experience

Nice to Haves:

Expertise in cybersecurity awareness and education with a deep understanding in technical security processes.