Executive Director, InfoSec Governance, Risk, & Compliance

Job ID 10151183 Location Glendale, California, United States / New York, New York, United States / Seattle, Washington, United States / Lake Buena Vista, Florida, United States Business The Walt Disney Company (Corporate) Date posted May 26, 2026

Apply Now

Job Summary:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Global Information Security (GIS) group provides services to protect the value and use of Disney’s information through collaboration, standardization, enforcement, and education across The Walt Disney Company. The main focus areas of this group are: Reduce the risk of both accidental and malicious data disclosure; Identify, monitor, engage with complete inventory of information; Establish appropriate policies and procedures to be followed; Educate user community to minimize risk.

Disney’s InfoSec GRC team is seeking a transformational leader to drive the next evolution of Governance, Risk, and Compliance across the enterprise. Reporting to the VP of Information Security, this role will lead the shift from a traditional compliance-driven approach to a modern, risk-intelligence-led model that enables better business decisions, strengthens security posture, and scales with Disney’s global technology and content ecosystem. This leader will partner closely with GIS and business leadership to embed risk awareness into daily operations, ensuring GRC is a strategic enabler of innovation—not a barrier.

What You'll Do

Transform GRC at Disney

Drive the evolution of Disney’s InfoSec GRC program from a compliance-centric model to a dynamic, risk-intelligence-led capability that informs enterprise investment and prioritization decisions

Define and elevate GRC standards by introducing innovative approaches to risk quantification, compliance automation, and integrated governance

Partner with GIS and segment technology leadership to position GRC as a strategic business enabler, translating complex risks into actionable, executive-ready insights

Champion a culture where risk awareness is embedded into daily decision-making, enabling intuitive and scalable risk-informed behaviors across the enterprise

Risk Management Leadership

Lead the design, implementation, and continuous improvement of Disney’s enterprise InfoSec Risk Management Framework

Establish and operationalize risk tolerance models, translating business objectives into clear prioritization, investment, and remediation decisions

Build and mature a centralized cybersecurity risk register integrating threat intelligence, vulnerabilities, and third-party risk data

Drive risk-based prioritization across InfoSec functions to ensure measurable risk reduction and alignment to enterprise objectives

Deliver clear, credible, and decision-ready risk reporting to executive leadership and the Board, including financial risk quantification (e.g., FAIR)

Governance Program Leadership

Oversee the full lifecycle of InfoSec policies, standards, and guidelines, ensuring they are risk-based, actionable, and aligned with business needs

Embed governance controls into the technology lifecycle (e.g., DevSecOps, cloud, infrastructure-as-code), reducing reliance on manual processes through automation

Establish a policy effectiveness framework focused on behavioral change and measurable risk reduction

Define and advance governance strategies for emerging technologies, including AI/ML, quantum security, and autonomous systems

Lead enterprise maturity assessments (e.g., NIST CSF) to identify gaps and inform strategic investment decisions

Compliance Program Leadership

Provide oversight of global regulatory and contractual compliance programs (e.g., SOX, PCI, GDPR, ISO), ensuring consistency and scalability

Build and operationalize a “compliance-as-a-service” model that enables self-service, automates evidence collection, and minimizes burden on engineering teams

Monitor and anticipate changes in the regulatory landscape, proactively positioning Disney to meet evolving requirements

Organizational Leadership

Lead, develop, and scale a high-performing global GRC organization, fostering a culture of accountability, innovation, and continuous improvement

Drive organizational excellence through strong leadership, talent development, and a focus on delivering scalable, forward-looking solutions

What You’ll Bring

Must-Have Qualifications

You will have 12+ years of progressive experience in cybersecurity, technology risk, or compliance, including 3+ years leading enterprise-scale GRC functions

You will bring structured problem-solving, audit rigor, and enterprise advisory experience

You will have industry experience within large, complex organizations, with the ability to operate effectively in highly matrixed environments

You will have a proven track record of transforming GRC programs into risk-driven operating models that influence enterprise decision-making

You will have deep expertise across risk management, governance, and compliance, including frameworks, policy lifecycle, automation, audit, and controls assurance)

You will have strong working knowledge of industry frameworks and regulations, including NIST CSF, NIST 800-53, ISO 27001, PCI DSS 4.0, SOX ITGC, and GDPR

You will have demonstrated executive presence and exceptional influence skills, with the ability to operate as a trusted advisor to senior leadership and translate complex technical risk into clear business insights

You will have experience applying financial risk quantification methodologies (e.g., FAIR) to support investment and prioritization decisions

You will have a strong customer-focused mindset, ensuring GRC solutions enable the business and enhance—not hinder—user and product experiences

You will have experience leading in highly matrixed, global environments, driving alignment across engineering, security, and business stakeholders

Leadership & Transformation Profile (Critical for Success)

You will have a mindset of a thought partner—not just an operator—bringing a strategic, forward-looking perspective to GRC

You will have a track record of asking hard questions, challenging legacy ways of working, and driving meaningful change across organizations

You will have the ability to connect cost, customer experience, and operational efficiency into a cohesive, risk-informed strategy

You will have demonstrated success leading large-scale transformation initiatives, influencing without authority, and driving adoption across complex organizations

Technical Expertise

You will have advanced expertise in audit methodologies, controls testing, and assurance processes, including ITGCs and automated control environments (must have qualification)

You will have hands-on experience with leading GRC platforms (e.g., Archer, ServiceNow GRC, SailPoint)

You will have a strong understanding of cloud security and compliance across AWS, Azure, and GCP environments

You will have familiarity with DevSecOps practices and integrating security and governance into software development and infrastructure pipelines

Nice-to-Have Qualifications

You may have experience within media, entertainment, or similarly complex, consumer-facing industries

You may have experience from a Big 4 consulting firm.

You may have experience advancing emerging risk domains such as AI/ML governance, third-party risk, or next-generation compliance capabilities

Education

You will have a bachelor’s degree in computer science, information security, or a related field—or equivalent practical experience (education)

You may have advanced degrees or relevant certifications (e.g., CISSP, CISM, CRISC) (education)

The hiring range for this position in Orlando, FL is $197,500 to $265,000 per year and in Glendale,CA is $207,400 to $278,200 per year. The hiring range for this position in Seattle, WA is $217,300 to $291,500 per year and in New York, NY is $217,300 to $291,500 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Apply Now

About The Walt Disney Company (Corporate):

At Disney Corporate you can see how the businesses behind the Company’s powerful brands come together to create the most innovative, far-reaching and admired entertainment company in the world. As a member of a corporate team, you’ll work with world-class leaders driving the strategies that keep The Walt Disney Company at the leading edge of entertainment. See and be seen by other innovative thinkers as you enable the greatest storytellers in the world to create memories for millions of families around the globe.

About The Walt Disney Company:

The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise that includes three core business segments: Disney Entertainment, ESPN, and Disney Experiences. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney’s stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.

This position is with Disney Worldwide Services, Inc., which is part of a business we call The Walt Disney Company (Corporate).

Disney Worldwide Services, Inc. is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, religion, color, sex, sexual orientation, gender, gender identity, gender expression, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information or disability, or any other basis prohibited by federal, state or local law. Disney champions a business environment where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a constantly evolving world.

DISABILITY ACCOMMODATION FOR EMPLOYMENT APPLICATIONS

The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.

Having technical issues? View the FAQs for help.

Hiring Process

Where Does Your Story Begin?

Explore Disney Careers and the Life at Disney blog to learn about all the amazing opportunities waiting to be discovered at The Walt Disney Company.
Be Part of the Story

There are many different brands and businesses to explore. Once you've found the opportunity that is right for you, take the next step by completing your application.
The Next Chapter

Once you've applied, you will receive an email allowing you to access your candidate dashboard. Create your login and make sure to check your dashboard often to see your application progress.