empty

Secrets Management Governance Lead

The Walt Disney Company

Job Description

Posted on: 
March 3, 2025

Summary and company overview

Who We Are

The Identity Cyber Process, Governance & Administration team is one of the primary functional teams under the enterprise-supporting Identity and Access Management (IAM) organization within Enterprise Technology. This team is accountable and essential for the security and governance of the core identity services across the organization, including Secrets Management and Privileged Access Management (PAM). Specifically, this team’s mission is to define, deliver, enforce and administer policies, standards, controls, platforms, and security practices for workforce identity across The Walt Disney Company (TWDC) to reduce security risk and enable IAM service effectiveness.

Responsibilities

  • Engage across the company with strategic partners as the enterprise-wide Governance Lead for the Secrets Management and PAM service.
  • Own majority of executive and business partner communications on risk reporting for the Secrets Management and PAM service, including to segment security teams, internal audit teams, etc.
  • Act as a SME in driving improvements towards risk reduction to the overall Secrets Management and PAM service. Gain buy-in from key stakeholders for program success.
  • Manage multiple competing tasks/responsibilities simultaneously, including program roadmap advancement and oversight, engagement with customers, intra-team coordination and collaboration, stakeholder reporting, etc.
  • Provide knowledge of TWDC information security and regulatory policies and standards in the areas of secrets management and PAM

Job Requirements

Must Have

  • Minimum of 5+ years’ experience with hands-on Secrets Management including scanning and vaulting platforms, secrets remediation, and risk reduction reporting
  • Direct experience with securing exposed secrets, assisting to further refining scanning results
  • Strong knowledge of Privileged Access Management (PAM) solutions and governance processes
  • Experience partnering on technical risk assessments, performing advanced data analytics, facilitating compliance evaluations
  • Experience driving governance methodologies, creating technical standards, designing visual dashboard/reporting mechanisms, and formulating risk remediation strategies
  • Prior working experience in assessing and reviewing configurations of various secrets scanning solutions.
  • This is a highly autonomous role, and you will need to solve common secrets management and PAM gaps
  • Familiarity with various secrets management solutions, such as GitGuardian, ArmorCode, cloud scanning solutions, and vaulting solutions (e.g., HashiCorp, AWS Secrets Manager, Azure Key Vault, etc.)

Nice-to-Have

  • CISSP certification

Education

  • Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

Additional commentary

The hiring range for this position in New York City and Seattle, WA is $120,300-$161,300 per year and in California is $114,900-$154,100 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Summary and company overview

Who We Are

The Identity Cyber Process, Governance & Administration team is one of the primary functional teams under the enterprise-supporting Identity and Access Management (IAM) organization within Enterprise Technology. This team is accountable and essential for the security and governance of the core identity services across the organization, including Secrets Management and Privileged Access Management (PAM). Specifically, this team’s mission is to define, deliver, enforce and administer policies, standards, controls, platforms, and security practices for workforce identity across The Walt Disney Company (TWDC) to reduce security risk and enable IAM service effectiveness.

Apply now