Principal Compliance Analyst

Job ID 10147758 Location Bristol, Connecticut, United States / New York, New York, United States Business Disney Entertainment and ESPN Product & Technology Date posted Apr. 22, 2026

Apply Now

Job Summary:

Technology is at the heart of Disney’s past, present, and future. Disney Entertainment and ESPN Product & Technology is a global organization of engineers, product developers, designers, technologists, data scientists, and more – all working to build and advance the technological backbone for Disney’s media business globally.

The team marries technology with creativity to build world-class products, enhance storytelling, and drive velocity, innovation, and scalability for our businesses. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers. We work with every part of The Walt Disney Company’s media portfolio to advance the technological foundation and consumer media touch points serving millions of people around the world. 

Here are a few reasons why we think you’d love working here:

Building the future of Disney’s media: Our Technologists are designing and building the products and platforms that will power our media, advertising, and distribution businesses for years to come.

Reach, Scale & Impact: More than ever, Disney’s technology and products serve as a signature doorway for fans' connections with the company’s brands and stories. Disney+. Hulu. ESPN. ABC. ABC News…and many more. These products and brands – and the unmatched stories, storytellers, and events they carry – matter to millions of people globally. 

Innovation: We develop and implement groundbreaking products and techniques that shape industry norms, and solve complex and distinctive technical problems.

The Business Operations team helps guide and articulate technology strategy and research, and is responsible for driving the day-to-day operation of the Product & Technology organization, including: project and portfolio management and tracking; organization-level capital, space, and resource management and allocation; process management; technical incident management; and our administrative and workplace experience support team.

Role Summary

P&T is supporting a multi‑year GIS initiative aligned to the NIST Cybersecurity Framework (CSF) to strengthen operational resilience, reduce enterprise risk, and demonstrate measurable security maturity to shareholders, regulators, and external customers.

Achieving meaningful improvement across NIST domains requires coordinated execution across numerous security programs, engineering teams, and operational functions. To ensure success, we are establishing a dedicated NIST Security Program Lead responsible for governing and orchestrating the delivery of all NIST‑aligned initiatives across the enterprise security roadmap.

This role must be filled as a project hire (employee) rather than a contractor due to the sensitivity of the work. The position will have visibility into confidential security architecture, control weaknesses, internal audit findings, risk assessments, and remediation strategies that directly impact the organization's security posture. The NIST Principal Compliance Analyst operates as the central execution authority for the NIST program, ensuring that all framework‑aligned initiatives progress with clear governance, measurable outcomes, and transparent reporting to senior leadership.

Program Philosophy and Operating Model

The NIST program will be executed using a framework‑driven operational model focused on measurable security maturity and transparent governance.

Framework Alignment – All initiatives must map clearly to NIST CSF domains: Identify, Protect, Detect, Respond, and Recover.
Measurable Progress – Security improvements must be quantifiable through defined maturity targets and scorecards.
Transparent Governance – Program progress must be visible to engineering teams, program leaders, and executive stakeholders.
Cross‑Enterprise Collaboration – The program coordinates across security engineering, infrastructure, application development, and operations teams.

Key Responsibilities – NIST Program Leadership & Governance

Serve as enterprise program leader responsible for execution of the NIST CSF roadmap.
Establish the governance model for NIST initiatives including initiative ownership, accountability, and reporting cadence.
Coordinate program execution across security engineering, infrastructure teams, and application teams.
Ensure initiatives move from design to deployment to operational maturity.

Workstream Coordination & Delivery Oversight

IT Asset Management and CMDB maturity
Zero Trust architecture deployment
Data Security Posture Management (DSPM)
Privileged Access Management (PAM) expansion
Identity and application authentication governance
Secrets management lifecycle automation
Consumer protection security controls
AI security governance and defensive controls
Insider threat monitoring capabilities
Vendor risk management processes
Patch and vulnerability management automation
Ensure each initiative maintains clear deliverables, milestone tracking, measurable outcomes, and NIST alignment.

Program Scorecards & Security Maturity Measurement

Execute the P&T work of a GIS driven and designed security maturity measurement framework aligned to NIST CSF.
Develop standardized scorecards measuring control maturity, implementation coverage, operational adoption, and risk reduction impact in partnership with GIS.
Build program dashboards that show initiative progress, maturity improvement, remediation velocity, and participation across teams.
Provide and support executive‑level reporting enabling leadership to understand security posture and risk reduction progress.

Executive Stakeholder Communication

Serve as central communication lead for the NIST program.
Develop structured communications including monthly executive briefings and quarterly maturity reports.
Translate technical security work into strategic insights for leadership.
Ensure leadership visibility into both program progress and emerging risks.

Matrix Leadership & Cross‑Functional Execution

Lead execution across a matrixed organization without direct reporting authority.
Influence engineering leaders, architects, and security teams to align with NIST objectives.
Coordinate contributions from security engineering, identity teams, infrastructure teams, platform teams, and application development.
Drive accountability across distributed teams to ensure measurable outcomes.

Risk Identification and Remediation Strategy

Continuously assess the organization's security posture relative to NIST expectations.
Identify gaps between current control maturity and target maturity.
Coordinate remediation strategies prioritizing highest risk exposure areas.
Ensure remediation initiatives deliver sustainable security improvements.

Governance Structure

NIST Steering Committee – Participate with other senior leadership oversight responsible for strategic direction.
Initiative Workstream Leads – Coordinate / Lead technical leaders responsible for execution within each domain.
Program Management Layer – Operational coordination ensuring milestones and dependencies remain aligned.
Executive Reporting Cadence – Regular updates on maturity progress, risk posture, and initiative health.

Qualifications – Experience

10+ years in enterprise security, security architecture, risk management, or security program leadership or equivalent program leading experience
Experience leading large‑scale security or related transformation programs.
Familiarity with operating security programs aligned to NIST, ISO 27001, PCI DSS, or SOX.
Experience coordinating cross‑functional engineering, technical, data and/or security initiatives within complex enterprise / technical / service environments.
Bachelor’s degree required

Core Competencies

Enterprise program leadership
Matrix leadership across engineering teams
Strategic planning and operational execution
Security framework interpretation and implementation
Executive communication and influence
Data‑driven program reporting

Impact of This Role

Improves measurable maturity against the NIST Cybersecurity Framework.
Strengthens enterprise security posture across identity, asset visibility, privileged access, and data protection.
Provides leadership clear insight into security maturity and risk exposure.
Aligns engineering teams with operational security improvements while maintaining delivery velocity.
Demonstrates to customers, partners, regulators, and shareholders a structured and continuously improving security posture.

The hiring range for this position in Connecticut is $155,700.00 to $208,700.00 per year and in New York is $163,100.00 to $218,700.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Apply Now

About Disney Entertainment and ESPN Product & Technology:

At Disney Entertainment and ESPN Product & Technology, we’re blending imagination and innovation to reimagine the ways people experience and engage with the world’s most beloved stories and products. Our work is wide-ranging and deeply sophisticated. We create amazing experiences, transform the future of media, and build products and platforms that enable the connection between people everywhere and the stories and sports they love.

Disney’s ability to marry world-class technology with one-of-a-kind creativity makes us unique. It is at the heart of our past, present, and future. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers.

About The Walt Disney Company:

The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise that includes three core business segments: Disney Entertainment, ESPN, and Disney Experiences. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney’s stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.

This position is with Disney Entertainment & Sports LLC, which is part of a business we call Disney Entertainment and ESPN Product & Technology.

Disney Entertainment & Sports LLC is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, religion, color, sex, sexual orientation, gender, gender identity, gender expression, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information or disability, or any other basis prohibited by federal, state or local law. Disney champions a business environment where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a constantly evolving world.

DISABILITY ACCOMMODATION FOR EMPLOYMENT APPLICATIONS

The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.

Having technical issues? View the FAQs for help.

Hiring Process

Where Does Your Story Begin?

Explore Disney Careers and the Life at Disney blog to learn about all the amazing opportunities waiting to be discovered at The Walt Disney Company.
Be Part of the Story

There are many different brands and businesses to explore. Once you've found the opportunity that is right for you, take the next step by completing your application.
The Next Chapter

Once you've applied, you will receive an email allowing you to access your candidate dashboard. Create your login and make sure to check your dashboard often to see your application progress.

Explore this Location Bristol, CT

The Heart of Connecticut Bristol, Connecticut is just two hours from Boston and New York and just an hour from the shoreline. From the natural beauty of picturesque hills and fall foliage, to the high tech satellite dishes of ESPN, Bristol’s “City sized” with a small town vibe, offering wonderful memories no matter your pace.