Personnel Security Specialist
Security engineer job in Los Angeles, CA
MANTECH seeks a motivated, career and customer-oriented Personnel Security Specialist II to join our team in El Segundo, CA.
The Personnel Security Specialist's primary function is to handle personnel security functions in support of the customer's facility and organization. The position will provide day to day PERSEC services for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
Responsibilities include but are not limited to:
Build and Maintain tracking spreadsheets/databases for customer PERSEC activities.
Provide support for the security awareness and education programs.
Perform miscellaneous administrative support functions as directed by the contractor site lead and/or the Government Security Representative.
Review, track, and monitor security clearance processing activities with appropriate government personnel to achieve appropriate clearance actions.
Conduct Defense Central Index of Investigations (DCII), Joint Personnel Access System (JPAS), and SAPNP reviews of candidates being submitted for SAP access.
Perform data entry and record checks in the Joint Access Database (JADE) and maintain all customer sponsored personnel access information.
Receive and/or transmit classified visit requests as necessary to meet customer needs.
Minimum Qualifications:
Bachelor's degree; an additional 4 years of related experience might be considered for a degree.
6 + years of related experience.
4 + years of relevant SCI or SAP experience.
Must be familiar with security policy/manuals and the appropriate ICDs/JAFANs/DOD Manuals and other guiding policy documents.
Clearance Requirements:
Current Top Secret Clearance with SCI Eligibility.
Eligibility for access to Special Access Program Information.
Willingness to submit to a Counterintelligence polygraph.
Physical Requirements:
Must be able to remain in a stationary position 50%.
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.
Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.
IT Security and Network Engineer
Security engineer job in Los Angeles, CA
IT Security & Network Engineer - JM Eagle
Los Angeles, CA | Onsite 4 Days / Remote Fridays | $150,000 - $170,000 + Comprehensive Benefits
About Us
JM Eagle is the world's largest manufacturer of plastic pipe, providing the infrastructure that keeps communities connected across North America. Behind every operation is a secure, stable IT environment supporting 1,000+ users across 20+ locations.
We're strengthening that foundation - and seeking a hands-on IT Security & Network Engineer who can own our daily security operations and help modernize our network and cybersecurity posture.
This is a high-impact, individual contributor role for a senior engineer who thrives in both the strategic and technical trenches.
The Opportunity
This role is ideal for a seasoned IT security professional who wants broad ownership without stepping into management. You'll work closely with the Director of IT Operations and outsourced partners to secure our enterprise, harden our infrastructure, and enhance our cybersecurity frameworks.
Your time will be split approximately:
60% Cybersecurity: tools, monitoring, vulnerability management, incident response
40% Network Engineering: SD-WAN, firewalls, VPN, wireless, connectivity across 20+ sites
You will be the technical driver behind our security improvement roadmap.
What You'll Do
Cybersecurity Operations
Own day-to-day cybersecurity operations, including monitoring, threat response, and risk mitigation.
Manage security tools and platforms: endpoint protection, SIEM, MFA, SSO, VPN, firewalls, and vulnerability management tools.
Perform recurring vulnerability scans and penetration-testing coordination; track and validate remediation.
Monitor security alerts using Fortinet, Darktrace, CrowdStrike, Nessus, Microsoft Defender, etc.
Lead internal security awareness initiatives and social engineering simulations.
Maintain documentation for configurations, policies, and security processes.
Network Engineering
Support secure network architecture across 20+ locations.
Oversee SD-WAN, firewall policies, VPN configuration, internet filtering, and remote-access security.
Support wireless infrastructure, site connectivity, and network performance monitoring.
Partner with third-party providers to ensure uptime, reliability, and strong security posture.
Governance & Collaboration
Work with IT leadership to strengthen cybersecurity governance and reporting.
Contribute to incident response planning, tabletop exercises, and monthly security briefings.
Evaluate threats and emerging technologies; propose continuous improvements.
What You Bring
Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
8+ years of experience in IT security and network engineering supporting 1,000+ users across distributed sites.
4+ years of hands-on experience with enterprise security tools and platforms.
Deep experience with the Microsoft ecosystem: Azure, M365, Active Directory / Entra ID, SCCM / Intune.
Strong working knowledge of:
MFA, SSO, VPN
Endpoint protection
SIEM solutions
Network segmentation, encryption, hardening
Monitor and respond to security alerts using tools like Fortinet, Darktrace, CrowdStrike, Nessus, and Microsoft Defender.
Familiarity with SD-WAN architectures, wireless networking, and network monitoring tools.
Understanding of ITIL, ITSM, NIST frameworks; CISSP or similar preferred but not required.
Excellent communication skills with the ability to work across teams.
Comfort managing outsourced security and network service providers.
A highly proactive, self-starting approach - someone who solves problems end-to-end.
Why JM Eagle
Directly influence and modernize the cybersecurity posture of the world's largest pipe manufacturer.
Join an enterprise undergoing major IT transformation with full executive backing.
Work with a Microsoft-centric environment supporting 1,000+ users and 20+ distributed locations.
Competitive salary: $150K-$170K + bonus + excellent benefits.
4 days onsite in Los Angeles; remote Fridays.
Work Environment
Primarily a professional headquarters environment. Occasional travel to manufacturing and distribution facilities may be required. Some exposure to plant or outdoor areas during site visits.
Security Analyst
Security engineer job in Los Angeles, CA
We are seeking an Information Security Analyst to support enterprise security operations with a focus on vendor risk management, security control integration, and infrastructure security. This role is responsible for conducting security assessments, coordinating the implementation of core security services (including SSO, logging, IAM, and data protection), and supporting compliance activities aligned with frameworks such as NIST and ISO 27001. The ideal candidate has experience in cybersecurity risk management, cloud environments (AWS/Azure), and collaborating with technical teams to ensure the effective delivery of security controls.
At least 2+ years of experience in the following:
Security & Compliance Frameworks
NIST CSF
ISO 27001
CIS Controls
ITIL
SOC 2
PCI DSS
FedRAMP
GDPR / CCPA
Vendor Risk & GRC Tools
OneTrust
SIG (Standardized Information Gathering)
Other GRC/TPRM platforms
Identity, SSO & Access Management
SSO (PingFederate, SAML)
Active Directory
Azure AD
AWS IAM
System Engineer/IT Advisor - MSP
Security engineer job in La Verne, CA
📍 Base: Client base is in LA and HQ is in La Verne, CA
💰 $130 to $140K + Bonus + Benefits
We're seeking a System Engineer/ Consultative to join a growing Managed Services Provider (MSP). This role blends advanced technical expertise with consultative, client-facing responsibilities. You'll resolve high-level escalations, lead infrastructure projects, and identify opportunities to upsell solutions that truly add value for clients.
What You'll Do:
Own L3 escalations across server, cloud, and networking environments
Design and implement solutions (Azure, M365, VMware, SonicWall, etc.)
Act as a trusted advisor to clients, aligning IT with business goals
Spot upsell opportunities and work with leadership to close deals
Mentor junior engineers and help shape best practices
What We're Looking For:
4+ years MSP experience (required)
Advanced knowledge of Microsoft Server, Azure, M365, AD, VMware, and networking
Strong client-facing, consultative approach
Proven ability to upsell or expand client accounts through solutions
Perks & Benefits:
✅ Competitive salary + bonus
✅ Medical, Dental, Vision, 401(k) + 5% match
✅ PTO + Holidays
✅ Clear upward mobility and leadership growth
✅ Paid parking
Network Engineer at T.H.E. Health and Wellness Centers
Security engineer job in Los Angeles, CA
Working along with our Chief of IT. Our network engineer will help to stream line network issues and construct better network systems to allow our medical staff to experience less setbacks and to better help our patients.
Essential Duties and Responsibilities:
• Maintains local area networks (LAN), wide area networks (WAN), and wireless networks • Monitor network performance and troubleshoot connectivity issues • Ensure network security and compliance with HIPAA and other healthcare regulations • Manage and monitor firewalls, VPNs, routers, switches, and other networking hardware • Collaborate with third-party vendors and IT support providers • Provide technical support to clinic staff for network-related issues • Maintain documentation of network configurations and procedures • Support secure remote access technologies for the corporate network • Assist with IT planning and upgrades to support clinic growth and relocations
Cybersecurity:
• Manage security protocols to protect patient data and clinic systems • Conduct regular vulnerability assessments and penetration testing • Monitor for security breaches and respond to incidents • Ensure compliance with HIPAA and other healthcare data protection regulations • Manage endpoint protection, intrusion detection/prevention systems (IDS/IPS), and email security • Collaborate with vendors and IT partners on secure system integration
Education and Qualifications
• 5+ years of experience in network engineering or IT infrastructure • Bachelor's Degree in Computer Science or related field preferred • Strong understanding of TCP/IP, DNS, DHCP, and VPN technologies • Experience with Cisco, Meraki, HP Aruba switches, or similar networking equipment • Familiarity with healthcare IT systems and HIPAA compliance is a plus • Excellent problem-solving and communication skills • Ability to work independently and prioritize tasks in a fast-paced environment Experience of networking and remote access solutions • Knowledge of cybersecurity best practices • Certifications such as CCNA, CompTIA Network+, or equivalent
Physical Demands:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to stand, sit, talk or hear. The employee is occasionally required to use hands to handle, or feel objects, keyboard or controls; and reach with hands and arms. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
Disclaimer
This position requires compliance with Health Center's written standards, including its Standards of Conduct and policies and procedures (“Written Standards”). Such compliance will be an element considered as part of the QI Director'sregular performance evaluation. Failure to comply with Health Center's Written Standards, which may include the failure to report any conduct or event that potentially violates legal or compliance requirements or Health Center's Written Standards, will be met by the enforcement of disciplinary action, up to and including possible termination, in accordance with Health Center's Compliance Program Policy and Procedure. I have reviewed and understand the job functions required of me for the position in employment with T.H.E. Clinic, Inc. I understand that T.H.E. Clinic, Inc. reserves the right to modify job duties or job descriptions at any time
System Engineer
Security engineer job in Los Angeles, CA
Job Title: Systems Engineer
Employment Type: Full-Time
TransSIGHT is at the forefront of delivering advanced transportation solutions, providing innovative software and hardware products that enhance system efficiency, reliability, and customer experience. We are seeking a highly motivated Systems Engineer to join our Los Angeles team and contribute to the design, development, and deployment of cutting-edge solutions.
Position Summary:
The Systems Engineer will play a critical role in supporting the development, integration, and deployment of software and hardware systems. This role requires a detail-oriented professional capable of coordinating system development tasks, maintaining thorough technical documentation, and ensuring successful solution implementation for our clients.
Primary Responsibilities:
Support the definition of software and hardware products and interfaces in the areas of CAD/AVL and fare collection.
Coordinate system development tasks, including design, integration, and formal testing.
Oversee all transitions into customer deployment environments.
Develop and execute projects encompassing system specifications, technical and logistical requirements, and other disciplines.
Create and maintain programmatic and technical documentation, including design documents, requirement matrices, and system diagrams, to ensure efficient planning and execution.
Manage and document system configurations.
Ensure the successful deployment of solutions.
Maintain a thorough working knowledge of enterprise applications.
Implement performance analysis and reliability analysis of end-to-end protocols.
Assist with other tasks as needed by the Systems Engineering department.
Provide training and guidance to Associates and Project Engineer I/II staff as needed.
Qualifications:
Bachelor's degree in Systems Engineering, Computer Science, Electrical Engineering, or a related field.
Minimum of 5 years of experience in systems engineering, software/hardware integration, or related disciplines.
Strong understanding of system design, integration, and testing processes.
Experience managing technical documentation and system configurations.
Ability to perform performance and reliability analysis of complex systems.
Excellent problem-solving, organizational, and communication skills.
Ability to work both independently and collaboratively in a fast-paced environment.
Preferred:
Prior experience in transportation, software, or hardware systems engineering.
Familiarity with enterprise applications and deployment processes.
Why Join TransSIGHT:
Work on innovative projects shaping the future of transportation.
Collaborative and supportive team environment.
Opportunities for professional growth and continuous learning.
Principal/ Sr. Principal Industrial Security Analyst (level 3/4)
Security engineer job in Los Angeles, CA
RELOCATION ASSISTANCE: No relocation assistance available CLEARANCE TYPE: SecretTRAVEL: Yes, 25% of the TimeDescriptionAt Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Put your skills to the test by pushing the boundaries of what's possible. From global defense to sustainment and modernization to mission readiness, your experience and ability will make it a reality. Our programs are built on equal parts of curiosity and collaboration. Our combined effort means our customers can connect and defend millions of people around the world. With Northrop Grumman, you'll have the opportunity to be an essential part of projects that will define your career, now and in the future.
Northrop Grumman Defense Systems is seeking an Principal or Sr. Principal Industrial Security Analyst (3/4) for our Northridge, CA location.
Roles and Responsibilities:
Develops and administers physical security programs and procedures for classified or proprietary materials, documents, and equipment. Studies and implements federal security regulations that apply to company operations
Obtains rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies
Prepares manuals outlining regulations, and establishes procedures for handling, storing, and keeping records, and for granting personnel and visitors access to restricted records and materials
Conducts security education classes and security audits
Ensures security compliance as a CSSO in accordance with DoDM 5205.07
Responsible for offsite and subcontractor security standups and posture
ISA duties will include:
CSSO for offsite and subcontractor sites associated with the program
Support a fast-paced, high-profile program; creating, maintaining, and leveraging working relationships with internal and external customers
Study and implement company and federal security policies, regulations, and procedures that apply to company operations
Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies
Manage program security compliance and operations across multiple functions, including security SCIF and/or SAPF administration, PHYSEC, COMSEC, PERSEC, OPSEC, Contract Security, Security Education, Investigations, Visitor Control, and Document Control Management
Develop and implement a security education and awareness program
Conduct internal security audits. Investigate security violations and prepare reports specifying preventive action to be taken
Ensure adherence to contractual guidance for classified programs and cleared facilities in accordance with the Security Statements of Work, DD Form 254, DoD Contract Security Classification Specifications guidance
Assist program managers and professional staff in interpreting, applying, and complying with program Security Classification Guides (SCG)
Provide personnel security (PERSEC) support to include but not limited to reviewing and processing required documentation in support of SCI and SAP nomination processes; maintain PERSEC databases; prepare and administer program indoctrination and debriefings; access, review, and submit clearance and access information using the appropriate government database and other information systems
Provide facility security administration, documentation, and support: implement Standard Operating Procedures (SOP); conduct SCI and SAP security program self-inspections
Provide security support for Sensitive Compartmented Information Facility (SCIF) and Special Access Program Facility (SAPF) build construction projects to include obtaining customer accreditation in accordance with SCI and SAP DoD Manuals, ICD, ICS Tech Spec, and other government requirements
Manage and maintain UL-2050 Compliant Intrusion Detection Systems (IDS) and automated Access Control Systems (ACS)
Other duties as assigned
Basic Qualifications:
Principal Industrial Security Analyst (level 3)
Must have a high school diploma or GED with at least 9 years of related experience; OR 5 year of experience with a bachelor's degree
Experience with any of the following: Government manuals (32 CFR Part 117, NISPOM, DODM 5205.07, etc.)
Strong working knowledge of basic office automation tool suites such as MS Office (Word, Excel, PowerPoint)
Excellent customer service and communication skills
Must have an active Secret clearance
Ability to maintain flexibility to deal with changing priorities and deadlines.
Ability to work extended hours, in a fast paced, deadline driven environment, excellent communication skills speaking, writing skills and organized skills enabling effective communications
CSSO Experience
Ability to travel
Basic Qualifications:
Sr. Principal Industrial Security Analyst (level 4)
Must have a high school diploma or GED with at least 12 years of related experience; OR 8 year of experience with a bachelor's degree
Experience with any of the following: Government manuals (32 CFR Part 117, NISPOM, DODM 5205.07, etc.)
Strong working knowledge of basic office automation tool suites such as MS Office (Word, Excel, PowerPoint)
Excellent customer service and communication skills
Must have an active Secret clearance
Ability to maintain flexibility to deal with changing priorities and deadlines.
Ability to work extended hours, in a fast paced, deadline driven environment, excellent communication skills speaking, writing skills and organized skills enabling effective communications
CSSO Experience
Ability to travel
Preferred Qualifications:
Experience Leading Security Teams from Subcontractors and Offsite
Ability to work independently and follow projects through to completion.
Current Top-Secret clearance
Self-starter with minimal supervision
Security experience in a manufacturing environment
Supply Chain Security Experience
Primary Level Salary Range: $94,200.00 - $141,200.00Secondary Level Salary Range: $117,500.00 - $176,300.00The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit *********************************** U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
Auto-ApplyCyber Defense Forensics Analyst
Security engineer job in Los Angeles, CA
At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all. The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
Today's world is fuelled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust.
Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value.
The opportunity
Cyber Triage and Forensics (CTF) Incident Analyst will work as a senior member of the technical team responsible for security incident response for EY. The candidate will work as an escalation point for suspect or confirmed security incidents. Responsibilities include performing digital forensic analysis, following security incident response standard methodologies, malware analysis, identify indicators of compromise, support remediation or coordinate remediation efforts of a security incident, and develop documentation to support the security incident response process.
Your key responsibilities
Investigate, coordinate, bring to resolution, and report on security incidents as they are brought up or identified
Forensically analyze end user systems and servers found to have possible indicators of compromise
Analysis of artifacts collected during a security incident/forensic analysis
Identify security incidents through ‘Hunting' operations within a SIEM and other relevant tools
Interface and connect with server owners, system custodians, and IT contacts to pursue security incident response activities, including: obtaining access to systems, digital artifact collection, and containment and/or remediation actions
Provide consultation and assessment on perceived security threats
Maintain, manage, improve and update security incident process and protocol documentation
Regularly provide reporting and metrics on case work
Resolution of security incidents by identifying root cause and solutions
Analyze findings in investigative matters, and develop fact based reports
Be on-call to deliver global incident response
Skills and attributes for success
Resolution of security incidents by identifying root cause and solutions
Analyze findings in investigative matters, and develop fact-based reports
Proven integrity and judgment within a professional environment
Ability to appropriately balance work/personal priorities
To qualify for the role you must have
Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or a related field
5+ years experience in incident response, computer forensics analysis and/or malware reverse engineering;
Understanding of security threats, vulnerabilities, and incident response;
Understanding of electronic investigation, forensic tools, and methodologies, including: log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative processes, malware identification and analysis;
Be familiar with legalities surrounding electronic discovery and analysis;
Experience with SIEM technologies (i.e. Splunk);
Deep understanding of both Windows and Unix/Linux based operating systems;
Ideally, you'll also have
Hold or be willing to pursue related professional certifications such as GCFE, GCFA or GCIH
Background in security incident response in Cloud-based environments, such as Azure
Programming skills in PowerShell, Python and/or C/C++
Understanding of the best security practices for network architecture and server configuration
What we look for
Demonstrated integrity in a professional environment
Ability to work independently
Have a global mind-set for working with different cultures and backgrounds
Knowledgeable in business industry standard security incident response process, procedures, and life cycle
Excellent teaming skills
Excellent social, communication, and writing skills
What we offer you The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary range/s. At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $87,700 to $164,000. The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $105,200 to $186,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Are you ready to shape your future with confidence? Apply today.
EY accepts applications for this position on an on-going basis.
For those living in California, please click here for additional information.
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society, and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy, and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at **************************.
Security Systems Administrator
Security engineer job in Santa Monica, CA
FIGS is looking for a Security Systems Administrator to join our growing information technology team's expansion into cybersecurity. This individual will be responsible for building, implementing, and managing security systems that protect FIGS' infrastructure, data, and digital assets.
The ideal candidate brings deep hands-on experience across a variety of security technologies and environments, and knows how to effectively balance proactive defense with operational efficiency. In this role, you'll lead critical security initiatives across identity management, threat detection, vulnerability assessment, incident response, and business continuity.
You'll also serve as a key partner to our Engineering, DevOps, and IT teams by collaborating cross-functionally to ensure our security posture is strong, scalable, and resilient. We're looking for someone who thrives in fast-paced environments, communicates clearly, and confidently navigates both strategic and tactical challenges.
What you'll do:
Run phishing campaigns, perform or coordinate pentesting with third-parties
Coordinate with Developers to build software BOM, DAST then SAST in CI/CD
Coordinate with SREs to set AWS account, logging, standards, monitor for non-compliance
Configure alerts and coordinate with other teams to respond to alerts from all of the above
Cyber security incident handler
Set up reporting and dashboards for incident reporting
Run post-mortem reports for any security incidents
Security assessments for onboarding or renewal of SaaS applications
Develop and maintain business continuity plans, including performing business impact analyses
About you:
5-7 years of experience in cyber security, with a focus on systems engineering, infrastructure, or endpoint protection
Strong understanding of the threat landscape and modern attack vectors
Hands-on experience with cloud environments (AWS and/or Azure) and security-related tooling
Experience administering centralized logging infrastructure (including SIEM and SOAR) and writing alerts for security events
Proficiency in EDR/XDR, MDM, and DLP solutions
Familiarity with Cloud Security tools such as Netskope or CrowdStrike is a plus
Comfortable scripting in Python and performing queries in MySQL
Security certifications (e.g. CISSP, GCIH, CISM, CCSK, etc.) are a plus but not required
What you'll bring:
Proven work ethic and integrity
Positive attitude and willingness to teach others how they like to be taught
Desire to excel, learn, and grow with FIGS
Aspiration to create change and make an immediate impact
Entrepreneurial spirit and egoless nature
FIGS Compensation and Benefits
Pay Range
At FIGS, your base salary is one part of your total compensation package. This role's base salary range is between $112,000 and $140,000. Actual base salary is determined based on a number of factors, including but not limited to your relevant skills, qualifications, and years of experience.
Additional Compensation and Benefits
Equity: Eligible FIGS employees have the opportunity to own shares of FIGS stock through our new-hire equity program. Additionally, FIGS provides a discount when purchasing FIGS stock voluntarily through our FIGS Employee Stock Purchase Plan
Annual bonus: This position is eligible to participate in the FIGS annual bonus program
Other compensation and benefits offered include:
Comprehensive benefits and perks package focused on your well-being, including premium medical, dental and vision coverage, and full access to wellness services through Breethe and Classpass. 100% FIGS-sponsored life insurance and disability insurance
Amazing 401(k) program, with a company match up to the first 6% of your contribution
Generous paid time off - We have 12 company holidays. For salaried team members, we offer flexible vacation. For our hourly team members, we offer up to 3 weeks of accrued vacation
Meaningful time away for baby bonding, including parental leave, new parent care meals, and a transition back to work for primary caregivers
FIGS sponsored Uber Eats voucher for in-office weeks
Personalized discount code for 50% off all FIGS products, along with a separate code to share with family and friends to enjoy a 25% discount site-wide
Access to FIGS Vet, Discounted Pet Daycare, Discounted Pet Insurance, and so much more…
*Benefits eligibility is determined by hour requirements and length of service
A little bit about us…
FIGS, Inc. is a founder-led, direct-to-consumer healthcare apparel and lifestyle brand that seeks to celebrate, empower and serve current and future generations of healthcare professionals. We redefine what scrubs are by creating technically advanced apparel and products that feature an unmatched combination of comfort, durability, function and style, all at an affordable price. With the largest DTC platform in healthcare apparel, we sell our products to a rapidly growing community of loyal customers. Through these customer relationships, FIGS has built a community and lifestyle around a profession, revolutionizing the large and fragmented healthcare apparel market and becoming the industry's category-defining healthcare apparel and lifestyle brand.
Our Threads for Threads initiative is integral to our mission to improve the lives of healthcare professionals on a global scale. Founded alongside FIGS in 2013, Threads for Threads donates scrubs to healthcare professionals working in resource-poor countries around the world.
FIGS considers all Qualified Applicants, including those with Criminal Histories (e.g., arrests or conviction records), for Employment in accordance with applicable state and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
For information about how we process information in connection with your application, view our Employee & Applicant Privacy Policy linked in the footer below.
Auto-ApplySecurity Engineer
Security engineer job in Los Angeles, CA
Responsibilities:
Monitor security systems, logs, and alerts to detect and respond to potential security incidents promptly.
Assist in investigating and analyzing security breaches, unauthorized access attempts, and suspicious activities to mitigate risks and prevent future incidents.
Collaborate with the IT Security team to coordinate incident response efforts and implement appropriate measures to contain and remediate security incidents.
Educate employees on best security practices, including data protection, password management, and phishing awareness.
Assist in managing KnowBe4 training platform.
Assist in the implementation and configuration of security technologies such as firewalls, antivirus software, and intrusion detection/prevention systems.
Aid in conducting regular vulnerability assessments and scans on network devices, applications, and systems.
Assist in ensuring compliance with internal security policies and industry regulations by helping to conduct periodic audits and reviews.
Requirements:
Bachelor's degree in computer science, Information Security, or a related field is preferred, but relevant work experience or certifications will also be considered.
Familiarity with security tools and technologies such as firewalls, antivirus software, and SIEM (Security Information and Event Management) systems is advantageous.
Strong attention to detail and the ability to follow established security protocols.
Any relevant security certifications (Sec+) is a plus
Basic understanding of cybersecurity principles, concepts, and technologies.
Experience with the following is preferred:
Office 365, Entra, M365 Defender, Exchange
Active Directory, GPO
Azure Sentinel or other SIEM
Fortinet/FortiOS
SOC Experience
Behaviors/Competencies:
Integrity-Respect and accountability at every level and every interaction
Customer Service-Provide the highest level of customer service while building customer satisfaction and retention
Innovation-Develops and displays innovative approaches and ideas to our business
Teamwork-Contributes to building a positive team spirit and supports everyone's efforts to succeed
Physical & Environmental
While performing the duties of this job, the employee is regularly required to use hands, and is required to talk and hear. The employee is frequently required to stand, sit, and walk occasionally for long periods at a time. The employee may occasionally be required to reach with hands, arms and move objects up to 20 pounds. Specific vision abilities required by this job include close vision, peripheral vision, and ability to adjust focus. In addition, abilities for assessing the accuracy, neatness and thoroughness of the work assigned is required. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individual with disabilities to perform the essential function.
Classic Collision is an Equal Opportunity Employer:
As an equal opportunity employer, Classic Collision does not discriminate against any employee or candidate based on age, race, gender identity, gender expression, genetic information, national origin, physical or mental disability, protected veteran status, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by all applicable federal, state, and local laws.
Reasonable Accommodations:
Classic Collision is an equal opportunity employer that is committed to working with and providing reasonable accommodations to individual with disabilities. If you have a disability and you believe you need a reasonable accommodation to search for a job opening or submit an online application, please.
e-mail *******************************. This email is listed exclusively to assist disabled job seekers whose disability prevents them from being able to apply online.
This job description is not a complete statement of all duties and responsibilities comprising the position.
Auto-ApplyCyber Security
Security engineer job in Los Angeles, CA
Job Description
Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients.
Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time.
Responsibilities:
Engineer, implement and monitor security measures for the protection of computer systems, networks and information
Develop and implement security policies and controls to support the Cyber Security framework
Manage the existing cyber security training program across global, multilingual business
Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements
Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained
Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity
Continuous improvement in the areas of Information Security technologies, techniques and processes
Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard
Ability to interpret penetration test results and describe issues and fixes to non-security expert
Responsible for leading an accurate & comprehensive status reporting to the executive steering committee
Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap
Skills & Experience
Bachelor's degree and 12+ years of experience; additional years of directly applicable experience may be accepted in lieu of a degree.
Certified Information Systems Security Professional (CISSP)
8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts
Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps
Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology.
Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications
Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes
Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment.
Vulnerability Assessment testing and/or Penetration Testing (preferred)
Robotic Process Automation/Intelligent Automation (preferred)
Business case development supporting security technology solutions (preferred)
Additional certifications demonstrating cybersecurity/technical mastery (preferred)
Manager, Information Security, Productions
Security engineer job in Culver City, CA
The Information Security organization at Sony Pictures Entertainment is responsible for protecting our content, systems, and data from being stolen, damaged, or destroyed. To do so, we are continuously improving our tools, capabilities, and processes to stay ahead of evolving threats.
The Manager, Information Security Productions is accountable for operationalizing the Information Security Productions program across all SPE U.S. productions. This includes driving consistent implementation of approved security standards, tools, and controls; ensuring data-driven visibility into production security risk; and supporting compliance and readiness reporting to leadership. Success in this role requires strong cross-functional collaboration across Information Security, IT, S3, and production teams to embed security into creative workflows without friction, while ensuring protection of SPE's most valuable assets-our stories and intellectual property.
This role will also ensure program consistency with regional and global counterparts, contribute to automation and standardization of key controls, and support ongoing improvement of information security for productions practices across the production lifecycle.
Key indicators of success in this role will be:
+ Business leaders have near real-time visibility into production information security risk using meaningful, actionable metrics that drive timely and effective decision-making.
+ Consistent application of approved tools, workflows, and controls across productions, ensuring compliance and readiness reporting aligns with studio KPIs.
+ Production teams trust SPE to provide a secure, highly available, and easy-to-use digital production environment that safeguards our content and data.
+ Information Security, Physical Security, and IT operate as unified partners to protect SPE productions from concept to archive.
Within this organization, we value learning, agility, and collaboration. The Manager, Information Security Productions (CC, US) will be a key contributor to Sony Pictures Entertainment's goal of being the most trusted studio in the industry.
Responsibilities
Provide visibility and actionable insight into Information Security risk across active U.S. productions.
+ Monitor, analyze, and report on production security posture and key control performance metrics for each production.
+ Partner with global InfoSec, Risk, Threat Intelligence, Incident Response, Training, and Governance teams to align production needs with enterprise programs.
+ Prepare and present dashboards and reports on security trends, compliance status, and improvement opportunities.
+ Support the development of production-specific metrics and KPIs to measure control effectiveness.
+ With IT and Physical Security, maintain security controls in place for productions to most effectively meet our business goals.
Operationalize the Production Information Security Program across U.S. productions.
+ Ensure consistent implementation of approved security tools, policies, and workflows within productions.
+ Coordinate adoption of automated controls with productions, such as provisioning, watermarking, and access telemetry.
+ Support the standardization and scalability of production security practices across production titles and business units.
Ensure and track production security culture, awareness, and response readiness.
+ Amplify the reach of security training and awareness initiatives by coordinating rollout to productions, ensuring consistent messaging and participation tracking.
+ Gather feedback from productions to help refine information security for productions training and awareness efforts.
+ Partner with Incident Response to ensure clear communications, timely follow-up, and closure of corrective actions.
+ Track cultural and operational readiness indicators (e.g., onboarding rates, reporting engagement, post-incident improvements) to measure program maturity and continuous improvement.
Qualifications
+ 5+ Years of experience in Information Security, Information Technology or a related field
+ 5+ Years of experience in an organization directly involved in movie, television and/or other entertainment production, or equivalent educational experience.
+ Bachelor's degree preferred
+ Strong understanding of the technologies, tools and processes used in production of movies and/or television.
+ Knowledge of Information Security frameworks, standards and best practices and their relevance to business success
+ Specific knowledge of processes, tools and practices used to maintain confidentiality in the context of movie and television productions.
+ Ability to develop and maintain meaningful metrics to track program and process effectiveness.
+ Strong planning and analytical skills
+ Strong communications skills
Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics. To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.
Manager, Information Security Compliance
Security engineer job in Glendale, CA
Department Description
At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - and we're constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technological solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:
Secure the Magic by protecting information systems and platforms.
Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
Strengthen the business through optimizing execution, application, and technology used to protect the Company.
Innovate by investing in core capabilities to enhance operational efficiency.
Team Description:
Global Information Security (GIS) supports all of Disney's business segments, including Disney Entertainment & ESPN (DE&E). DE&E encompasses the operations of Disney's streaming services-Disney+, Hulu, ESPN+, Disney+ Hotstar, Star, and the upcoming Venu Sports streaming service-as well as Disney's broadcast and cable networks, including ABC, ESPN, FX, Disney Channels, and National Geographic. DE&E sits at the intersection of entertainment, sports, and technology, striving to connect viewers with beloved stories while advancing the streaming industry with consumer-first innovations. Security professionals supporting DE&E work with industry-leading technologies to deliver world-class, highly secure services to customers.
What You'll Do:
Independent audit support for:
SOX 404 ITGCs
PII
PCI
ISPS
Collaborate with Enterprise Controls and Compliance (ECC) to scope systems and respective ITGCs.
Perform control health checks and remediation testing procedures to address issues identified via audit assessments, access control reviews, internal or external audits and/or other assessments.
Develop and lead the Control Assurance Programs (ISPS and SOX).
Lead Audit Readiness efforts to ensure proper system scoping and respective ITGCs, control validations and timely program onboarding.
Participate in audit walkthrough meetings to help establish internal testing procedures to gain operational comfort in the design of the Company's automated controls.
This includes control self-evaluations of new controls or processes that impact the effectiveness of an existing control.
Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment.
Work with management and internal audit on maintaining the master Risk and Control Matrix over the systems material to Disney Entertainment and ESPN (Broadcast TV and Streaming - Hulu, Disney+, ESPN+, STAR+ products)
Ensure for timely management response of audit findings into our corporate SOCD/SAD.
Oversee ISPS Management Audit coordination and open action plans.
Provide consultancy to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands.
Management of GRC workflows around coordination of certifications and attestations.
Partner with leadership to support the PCI-DSS compliance program.
Develop training materials, coordinate training sessions, and monitor compliance with training requirements.
Oversee and manage a team of compliance analysts, ensuring day-to-day operations run smoothly and efficiently.
Assign tasks and projects to team members based on priorities, deadlines, and individual strengths.
Provide executive level updates on Compliance programs
Must Haves (Years of Experience, languages, programs, tools, etc.):
Minimum of 8 years of related work experience, with 3 in management roles
IT SOX experience and proven experience in supporting IT audit/compliance functions
Experience in managing people
Thorough understanding of SOX ITGC and ICFR 404 standards and audit objectives
Interpersonal skills with the ability to work with teams cross-functionally
Strong verbal and written communication skills and ability to effectively communicate to technical and non-technical audiences, including developers and tech operators
Detail-oriented but able to understand the big picture. Highly organized and efficient
Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
Experience with cloud-based services, specifically AWS
Nice To Haves (see above):
Experience and knowledge of NIST framework, ISO 27001, K-ISMS, GDPR
Experience working with companies that have a heavy microservice architecture
Education:
Bachelor's degree in Computer Science, CPA license, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience
The hiring range for this position in Glendale, CA and Santa Monica, CA is $141,900 to $190,300 per year and in New York, NY is $148,700 to $199,400 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
Job Posting Segment:
Enterprise Technology
Job Posting Primary Business:
Corporate Global Information Security
Primary Job Posting Category:
Security Governance
Employment Type:
Full time
Primary City, State, Region, Postal Code:
Glendale, CA, USA
Alternate City, State, Region, Postal Code:
USA - CA - 2450 Broadway, USA - NY - 7 Hudson Square
Date Posted:
2025-11-21
Auto-ApplyLinux System and Security Analyst
Security engineer job in Los Angeles, CA
**THE COMPANY** **Silvus Technologies** is dedicated to one mission: connecting those who keep us safe. We do so by delivering the most advanced Mobile Ad-hoc Network (MANET) radios powered by our custom and ever-evolving Mobile-Networked MIMO waveform. Together, our radios and waveform provide the vital communications for mission critical applications in the harshest environments from underground tunnels to high altitude balloons.
Silvus StreamCaster radios are being rapidly adopted by customers all over the world ranging from the U.S Departments of Defense, to International, Federal, State and Local Law Enforcement agencies, all the way to the Super Bowl, Grammys and industry-leading drone, robot, and other unmanned systems manufacturers.
_Wouldn't you like to join an incredibly talented group of people, doing very challenging work, with the prime directive of "_ Keeping Our Heroes Connected (************************************** P0GLc) _"?_
Silvus' rapid growth is fueled by a focus on research and innovation and a team of the most passionate, skilled, and creative thinking individuals. _If you are looking for a challenging experience, you owe it to yourself to learn how Silvus can provide a rewarding opportunity that creates a pathway to a fulfilling career._
**THE OPPORTUNITY**
Silvus is seeking a **Linux System and Security Analys** **t** to analyze, troubleshoot, automate, and conduct CyberSecurity activities based on Cybersecurity Maturity Model Certification (CMMC) and maintain the company's IT infrastructure. The position will exercise full ownership and decision-making authority over the resolution of end-user technical challenges, including hardware failures and software anomalies. This position's primary duty is to perform high-level systems analysis, security architecture, and risk assessment in support of organizational objectives. This includes exercising discretion and independent judgment on matters of significance to company-wide IT security and compliance. This position requires a DCSA clearance to be obtained within 12 months of employment.
This position is fully onsite, Monday through Friday at Silvus Technologies' HQ in the heart of vibrant **West Los Angeles.**
The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.
**ROLE AND RESPONSIBILITIES**
+ Act as the primary technical advisor for diagnosing and resolving complex infrastructure issues, with autonomy to escalate or implement system-level changes to maintain Production department continuity.
+ Responsible for evaluating risks, designing secure systems in compliance with Cybersecurity Maturity Model Certification (CMMC) standards, and making strategic recommendations.
+ Provide Linux and Windows system desktop and server support, as well as network administration for the entire company based on the NIST CyberSecurity Framework.
+ For individuals with Security Clearance, apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) to secure and maintain IT infrastructure, providing the necessary documentation and technical support required for continuous Authorization to Operate (ATO).
+ Responsible for Automated Deployment and monitoring of computer systems.
+ Oversee the planning and implementation of hardware lifecycle management for Windows and Linus-based servers and VMs.
+ Support vulnerability and patch management processes, ensuring all Linux vulnerabilities are remediated in accordance with NIST CyberSecurity Framework.
+ Support Engineering and R&D teams to ensure strict IT compliance with the CMMC framework, specifically with security controls. This role is critical in protecting Controlled Unclassified Information (CUI) and maintaining our accredited environment.
+ Develop and maintain documentation related to the company's IT infrastructure and support processes.
+ Oversee the governance and accuracy of the company's hardware and software asset inventory, ensuring appropriate lifecycle management and compliance with security and audit requirements.
+ May occasionally require on-call coverage overnight, on weekends, and on holidays.
+ Perform other related duties of which the above are representative.
**REQUIRED QUALIFICATIONS**
+ Bachelor's degree or equivalent in an IT-related field.
+ 3 years of Linux-related work experience.
+ Experience with installing, troubleshooting, and/or maintaining Linux-based software and hardware installations.
+ Fluency in Linux CLI, TCP/IP, LAN/VLAN Networking, Patch Management, and Backup.
+ Highly proficient in Google Suite and MS Office (Excel, Word, PowerPoint).
+ Strong interpersonal skills with a positive and enthusiastic attitude.
+ Demonstrated ability to operate as a team member, supporting departmental decisions, policies, and procedures with a positive and communicative attitude with company colleagues.
+ **Must be a U.S. Citizen** due to clients under U.S. government contracts.
+ **Must be able to obtain DCSA clearance within 12 months of employment.**
+ **All employment is contingent upon the successful clearance of a background check.**
**PREFERRED KNOWLEDGE, SKILLS AND ABILITIES**
+ Prior experience in a fast-paced office environment is a plus.
**WORKING CONDITIONS & PHYSICAL REQUIREMENTS**
+ Office environment.
+ Occasional exposure to heat, cold, and allergens while performing tests or demonstrations in the field.
+ While performing the duties of this job, the employee is required to do the following:
+ Perform bending and reaching movements to place items on lower and higher shelves.
+ Kneeling or squatting to access lower shelves.
+ Must be able to lift up to 50 lbs.
+ Walking/Moving in the labs.
**COMPENSATION**
_The pay range is NOT a guarantee. It is based on market research and peer data, and will vary depending on the candidate's experience and qualifications._
CA Pay Range
$80,000-$90,000 USD
**NOTE - As a U.S. Federal Contractor, Silvus Technologies requires that ALL candidates being considered for employment for any position (regardless of level) MUST be a U.S. Person (permanent resident or citizen). Stricter U.S. Citizen ONLY requirements are needed for some Engineering or R&D roles. This generally does NOT apply to International positions; only job postings for positions located in the U.S. Exceptions will be included in the Required Qualifications section of the posted position.**
**_All Employment is contingent upon the successful clearance of a background check._**
Silvus is proud to be an equal-opportunity employer, and we value diversity. We do not discriminate on the basis of race, color, age, religion or belief, ancestry, national origin, sex (including pregnancy), sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, physical or mental disability, protected veteran status, genetic information, political affiliation, or any other factor protected by applicable federal, state, or local laws.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive benefits and privileges of employment. Please contact us to request accommodation.
_*Silvus does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to Silvus Technologies._
Health Hacker - Los Angeles
Security engineer job in Los Angeles, CA
About UsAt Next Health, we are redefining health optimization by integrating cutting-edge medical innovation with preventative, data-driven wellness. Through our technology-forward platform and luxury clinical environments, we empower our members to take control of their well-being with personalized longevity solutions. We are rapidly expanding across the U.S., and we are seeking visionary leaders to help scale our digital infrastructure and member experience.
Your ImpactAs the Front Desk Receptionist at Next Health, you will be the first point of contact for our patients, visitors, and vendors. You will play a critical role in creating a positive patient experience and ensuring that our operations run smoothly.
Job DescriptionAs the Front Desk Receptionist, you will be responsible for:
Greeting patients and visitors with a welcoming and professional demeanor Checking in patients and verifying their demographic and payment information Scheduling appointments and managing the clinic schedule Assisting patients with questions and concerns Maintaining patient records and updating them as needed.Coordinating with other departments and healthcare providers to ensure seamless patient care.
What to Expect In this role, you can expect to:
Interact with a diverse group of patients and visitors Manage multiple tasks and responsibilities simultaneously Use electronic medical records and scheduling software Work closely with other departments and healthcare providers Provide excellent customer service and patient care
What You'll BringWe're looking for someone who has:
1+ years of experience in a medical office or healthcare setting Excellent communication and interpersonal skills Strong attention to detail and organizational skills Ability to manage multiple tasks and ************************************** Super AdminExperience with electronic medical records and scheduling software Knowledge of medical terminology and insurance billing practicesA passion for providing exceptional customer service and patient care Aptitude for sales Passion for and knowledge of health & wellness services.Exceptional at customer service.Display a genuine interest in helping other people.Excited to learn new things and be on the cutting edge of health & wellness.
Our Culture & PerksWe're a patient-centered healthcare clinic with a culture that values empathy, respect, and teamwork. We offer:
Competitive salary and benefits package Opportunities for professional growth and developmentA supportive and inclusive work environment Meaningful work that makes a difference in patient's lives
Expected CompensationThe expected compensation for this position is $21 per hour, plus benefits.
Pay offered may vary depending on multiple individualized factors, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
Additional Information: As part of our selection process, all candidates may be required to participate in an in-person interview with a Next Health representative at one of our locations, whenever possible, prior to a final hiring decision.Next Health is an Equal Opportunity employer, committed to promoting a diverse and inclusive workplace. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or expression, or any other characteristic protected by applicable federal, state, or local laws.
We are dedicated to ensuring equal employment opportunities for all applicants and employees, including those with criminal histories, arrest records, or conviction records, in accordance with relevant laws. This includes compliance with the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.
Qualified individuals with a disability who require assistance during the application or recruitment process, have the right to request a reasonable accommodation. Please submit your request to ********************.
We kindly ask that applicants refrain from calling our office regarding job inquiries. All application-related questions should be directed to ********************. Thank you for your understanding.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Easy ApplyManager, Information Security Compliance
Security engineer job in Glendale, CA
**Department Description** At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - and we're constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technological solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:
+ Secure the Magic by protecting information systems and platforms.
+ Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
+ Strengthen the business through optimizing execution, application, and technology used to protect the Company.
+ Innovate by investing in core capabilities to enhance operational efficiency.
**Team Description:**
Global Information Security (GIS) supports all of Disney's business segments, including Disney Entertainment & ESPN (DE&E). DE&E encompasses the operations of Disney's streaming services-Disney+, Hulu, ESPN+, Disney+ Hotstar, Star, and the upcoming Venu Sports streaming service-as well as Disney's broadcast and cable networks, including ABC, ESPN, FX, Disney Channels, and National Geographic. DE&E sits at the intersection of entertainment, sports, and technology, striving to connect viewers with beloved stories while advancing the streaming industry with consumer-first innovations. Security professionals supporting DE&E work with industry-leading technologies to deliver world-class, highly secure services to customers.
**What You'll Do:**
+ Independent audit support for:
+ SOX 404 ITGCs
+ PII
+ PCI
+ ISPS
+ Collaborate with Enterprise Controls and Compliance (ECC) to scope systems and respective ITGCs.
+ Perform control health checks and remediation testing procedures to address issues identified via audit assessments, access control reviews, internal or external audits and/or other assessments.
+ Develop and lead the Control Assurance Programs (ISPS and SOX).
+ Lead Audit Readiness efforts to ensure proper system scoping and respective ITGCs, control validations and timely program onboarding.
+ Participate in audit walkthrough meetings to help establish internal testing procedures to gain operational comfort in the design of the Company's automated controls.
+ This includes control self-evaluations of new controls or processes that impact the effectiveness of an existing control.
+ Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment.
+ Work with management and internal audit on maintaining the master Risk and Control Matrix over the systems material to Disney Entertainment and ESPN (Broadcast TV and Streaming - Hulu, Disney+, ESPN+, STAR+ products)
+ Ensure for timely management response of audit findings into our corporate SOCD/SAD.
+ Oversee ISPS Management Audit coordination and open action plans.
+ Provide consultancy to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands.
+ Management of GRC workflows around coordination of certifications and attestations.
+ Partner with leadership to support the PCI-DSS compliance program.
+ Develop training materials, coordinate training sessions, and monitor compliance with training requirements.
+ Oversee and manage a team of compliance analysts, ensuring day-to-day operations run smoothly and efficiently.
+ Assign tasks and projects to team members based on priorities, deadlines, and individual strengths.
+ Provide executive level updates on Compliance programs
**Must Haves (Years of Experience, languages, programs, tools, etc.):**
+ Minimum of 8 years of related work experience, with 3 in management roles
+ IT SOX experience and proven experience in supporting IT audit/compliance functions
+ Experience in managing people
+ Thorough understanding of SOX ITGC and ICFR 404 standards and audit objectives
+ Interpersonal skills with the ability to work with teams cross-functionally
+ Strong verbal and written communication skills and ability to effectively communicate to technical and non-technical audiences, including developers and tech operators
+ Detail-oriented but able to understand the big picture. Highly organized and efficient
+ Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
+ Experience with cloud-based services, specifically AWS
**Nice To Haves (see above):**
+ Experience and knowledge of NIST framework, ISO 27001, K-ISMS, GDPR
+ Experience working with companies that have a heavy microservice architecture
**Education:**
Bachelor's degree in Computer Science, CPA license, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience
The hiring range for this position in Glendale, CA and Santa Monica, CA is $141,900 to $190,300 per year and in New York, NY is $148,700 to $199,400 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
**Job ID:** 10135782
**Location:** Glendale,California
**Job Posting Company:** The Walt Disney Company (Corporate)
The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, email Candidate.Accommodations@Disney.com with your request. This email address is not for general employment inquiries or correspondence. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.
Manager, Information Security, Productions
Security engineer job in Culver City, CA
The Information Security organization at Sony Pictures Entertainment is responsible for protecting our content, systems, and data from being stolen, damaged, or destroyed. To do so, we are continuously improving our tools, capabilities, and processes to stay ahead of evolving threats.
The Manager, Information Security Productions is accountable for operationalizing the Information Security Productions program across all SPE U.S. productions. This includes driving consistent implementation of approved security standards, tools, and controls; ensuring data-driven visibility into production security risk; and supporting compliance and readiness reporting to leadership. Success in this role requires strong cross-functional collaboration across Information Security, IT, S3, and production teams to embed security into creative workflows without friction, while ensuring protection of SPE's most valuable assets-our stories and intellectual property.
This role will also ensure program consistency with regional and global counterparts, contribute to automation and standardization of key controls, and support ongoing improvement of information security for productions practices across the production lifecycle.
Key indicators of success in this role will be:
Business leaders have near real-time visibility into production information security risk using meaningful, actionable metrics that drive timely and effective decision-making.
Consistent application of approved tools, workflows, and controls across productions, ensuring compliance and readiness reporting aligns with studio KPIs.
Production teams trust SPE to provide a secure, highly available, and easy-to-use digital production environment that safeguards our content and data.
Information Security, Physical Security, and IT operate as unified partners to protect SPE productions from concept to archive.
Within this organization, we value learning, agility, and collaboration. The Manager, Information Security Productions (CC, US) will be a key contributor to Sony Pictures Entertainment's goal of being the most trusted studio in the industry.
Responsibilities
Provide visibility and actionable insight into Information Security risk across active U.S. productions.
Monitor, analyze, and report on production security posture and key control performance metrics for each production.
Partner with global InfoSec, Risk, Threat Intelligence, Incident Response, Training, and Governance teams to align production needs with enterprise programs.
Prepare and present dashboards and reports on security trends, compliance status, and improvement opportunities.
Support the development of production-specific metrics and KPIs to measure control effectiveness.
With IT and Physical Security, maintain security controls in place for productions to most effectively meet our business goals.
Operationalize the Production Information Security Program across U.S. productions.
Ensure consistent implementation of approved security tools, policies, and workflows within productions.
Coordinate adoption of automated controls with productions, such as provisioning, watermarking, and access telemetry.
Support the standardization and scalability of production security practices across production titles and business units.
Ensure and track production security culture, awareness, and response readiness.
Amplify the reach of security training and awareness initiatives by coordinating rollout to productions, ensuring consistent messaging and participation tracking.
Gather feedback from productions to help refine information security for productions training and awareness efforts.
Partner with Incident Response to ensure clear communications, timely follow-up, and closure of corrective actions.
Track cultural and operational readiness indicators (e.g., onboarding rates, reporting engagement, post-incident improvements) to measure program maturity and continuous improvement.
Qualifications
5+ Years of experience in Information Security, Information Technology or a related field
5+ Years of experience in an organization directly involved in movie, television and/or other entertainment production, or equivalent educational experience.
Bachelor's degree preferred
Strong understanding of the technologies, tools and processes used in production of movies and/or television.
Knowledge of Information Security frameworks, standards and best practices and their relevance to business success
Specific knowledge of processes, tools and practices used to maintain confidentiality in the context of movie and television productions.
Ability to develop and maintain meaningful metrics to track program and process effectiveness.
Strong planning and analytical skills
Strong communications skills
The anticipated base salary for this position is $115,000-$150,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.
Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.
SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.
To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.
Auto-ApplyLinux System and Security Analyst
Security engineer job in Los Angeles, CA
THE COMPANY
Silvus Technologies is dedicated to one mission: connecting those who keep us safe. We do so by delivering the most advanced Mobile Ad-hoc Network (MANET) radios powered by our custom and ever-evolving Mobile-Networked MIMO waveform. Together, our radios and waveform provide the vital communications for mission critical applications in the harshest environments from underground tunnels to high altitude balloons.
Silvus StreamCaster radios are being rapidly adopted by customers all over the world ranging from the U.S Departments of Defense, to International, Federal, State and Local Law Enforcement agencies, all the way to the Super Bowl, Grammys and industry-leading drone, robot, and other unmanned systems manufacturers.
Wouldn't you like to join an incredibly talented group of people, doing very challenging work, with the prime directive of “
Keeping Our Heroes Connected
”?
Silvus' rapid growth is fueled by a focus on research and innovation and a team of the most passionate, skilled, and creative thinking individuals.
If you are looking for a challenging experience, you owe it to yourself to learn how Silvus can provide a rewarding opportunity that creates a pathway to a fulfilling career.
THE OPPORTUNITY
Silvus is seeking a Linux System and Security Analyst to analyze, troubleshoot, automate, and conduct CyberSecurity activities based on Cybersecurity Maturity Model Certification (CMMC) and maintain the company's IT infrastructure. The position will exercise full ownership and decision-making authority over the resolution of end-user technical challenges, including hardware failures and software anomalies. This position's primary duty is to perform high-level systems analysis, security architecture, and risk assessment in support of organizational objectives. This includes exercising discretion and independent judgment on matters of significance to company-wide IT security and compliance. This position requires a DCSA clearance to be obtained within 12 months of employment.
This position is fully onsite, Monday through Friday at Silvus Technologies' HQ in the heart of vibrant West Los Angeles.
The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.
ROLE AND RESPONSIBILITIES
Act as the primary technical advisor for diagnosing and resolving complex infrastructure issues, with autonomy to escalate or implement system-level changes to maintain Production department continuity.
Responsible for evaluating risks, designing secure systems in compliance with Cybersecurity Maturity Model Certification (CMMC) standards, and making strategic recommendations.
Provide Linux and Windows system desktop and server support, as well as network administration for the entire company based on the NIST CyberSecurity Framework.
For individuals with Security Clearance, apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) to secure and maintain IT infrastructure, providing the necessary documentation and technical support required for continuous Authorization to Operate (ATO).
Responsible for Automated Deployment and monitoring of computer systems.
Oversee the planning and implementation of hardware lifecycle management for Windows and Linus-based servers and VMs.
Support vulnerability and patch management processes, ensuring all Linux vulnerabilities are remediated in accordance with NIST CyberSecurity Framework.
Support Engineering and R&D teams to ensure strict IT compliance with the CMMC framework, specifically with security controls. This role is critical in protecting Controlled Unclassified Information (CUI) and maintaining our accredited environment.
Develop and maintain documentation related to the company's IT infrastructure and support processes.
Oversee the governance and accuracy of the company's hardware and software asset inventory, ensuring appropriate lifecycle management and compliance with security and audit requirements.
May occasionally require on-call coverage overnight, on weekends, and on holidays.
Perform other related duties of which the above are representative.
REQUIRED QUALIFICATIONS
Bachelor's degree or equivalent in an IT-related field.
3 years of Linux-related work experience.
Experience with installing, troubleshooting, and/or maintaining Linux-based software and hardware installations.
Fluency in Linux CLI, TCP/IP, LAN/VLAN Networking, Patch Management, and Backup.
Highly proficient in Google Suite and MS Office (Excel, Word, PowerPoint).
Strong interpersonal skills with a positive and enthusiastic attitude.
Demonstrated ability to operate as a team member, supporting departmental decisions, policies, and procedures with a positive and communicative attitude with company colleagues.
Must be a U.S. Citizen due to clients under U.S. government contracts.
Must be able to obtain DCSA clearance within 12 months of employment.
All employment is contingent upon the successful clearance of a background check.
PREFERRED KNOWLEDGE, SKILLS AND ABILITIES
Prior experience in a fast-paced office environment is a plus.
WORKING CONDITIONS & PHYSICAL REQUIREMENTS
Office environment.
Occasional exposure to heat, cold, and allergens while performing tests or demonstrations in the field.
While performing the duties of this job, the employee is required to do the following:
Perform bending and reaching movements to place items on lower and higher shelves.
Kneeling or squatting to access lower shelves.
Must be able to lift up to 50 lbs.
Walking/Moving in the labs.
COMPENSATION
The pay range is NOT a guarantee. It is based on market research and peer data, and will vary depending on the candidate's experience and qualifications.
CA Pay Range$80,000-$90,000 USD
NOTE - As a U.S. Federal Contractor, Silvus Technologies requires that ALL candidates being considered for employment for any position (regardless of level) MUST be a U.S. Person (permanent resident or citizen). Stricter U.S. Citizen ONLY requirements are needed for some Engineering or R&D roles. This generally does NOT apply to International positions; only job postings for positions located in the U.S. Exceptions will be included in the Required Qualifications section of the posted position.
All Employment is contingent upon the successful clearance of a background check.
Silvus is proud to be an equal-opportunity employer, and we value diversity. We do not discriminate on the basis of race, color, age, religion or belief, ancestry, national origin, sex (including pregnancy), sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, physical or mental disability, protected veteran status, genetic information, political affiliation, or any other factor protected by applicable federal, state, or local laws.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive benefits and privileges of employment. Please contact us to request accommodation.
*Silvus does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to Silvus Technologies.
Auto-ApplyHealth Hacker - Los Angeles
Security engineer job in Los Angeles, CA
About UsAt Next Health, we are redefining health optimization by integrating cutting-edge medical innovation with preventative, data-driven wellness. Through our technology-forward platform and luxury clinical environments, we empower our members to take control of their well-being with personalized longevity solutions. We are rapidly expanding across the U.S., and we are seeking visionary leaders to help scale our digital infrastructure and member experience.
Your ImpactAs the Front Desk Receptionist at Next Health, you will be the first point of contact for our patients, visitors, and vendors. You will play a critical role in creating a positive patient experience and ensuring that our operations run smoothly.
Job DescriptionAs the Front Desk Receptionist, you will be responsible for:
Greeting patients and visitors with a welcoming and professional demeanor Checking in patients and verifying their demographic and payment information Scheduling appointments and managing the clinic schedule Assisting patients with questions and concerns Maintaining patient records and updating them as needed.Coordinating with other departments and healthcare providers to ensure seamless patient care.
What to Expect In this role, you can expect to:
Interact with a diverse group of patients and visitors Manage multiple tasks and responsibilities simultaneously Use electronic medical records and scheduling software Work closely with other departments and healthcare providers Provide excellent customer service and patient care
What You'll BringWe're looking for someone who has:
1+ years of experience in a medical office or healthcare setting Excellent communication and interpersonal skills Strong attention to detail and organizational skills Ability to manage multiple tasks and ************************************** Super AdminExperience with electronic medical records and scheduling software Knowledge of medical terminology and insurance billing practicesA passion for providing exceptional customer service and patient care Aptitude for sales Passion for and knowledge of health & wellness services.Exceptional at customer service.Display a genuine interest in helping other people.Excited to learn new things and be on the cutting edge of health & wellness.
Our Culture & PerksWe're a patient-centered healthcare clinic with a culture that values empathy, respect, and teamwork. We offer:
Competitive salary and benefits package Opportunities for professional growth and developmentA supportive and inclusive work environment Meaningful work that makes a difference in patient's lives
Expected CompensationThe expected compensation for this position is $21 per hour, plus benefits.
Pay offered may vary depending on multiple individualized factors, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
Additional Information: As part of our selection process, all candidates may be required to participate in an in-person interview with a Next Health representative at one of our locations, whenever possible, prior to a final hiring decision.Next Health is an Equal Opportunity employer, committed to promoting a diverse and inclusive workplace. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or expression, or any other characteristic protected by applicable federal, state, or local laws.
We are dedicated to ensuring equal employment opportunities for all applicants and employees, including those with criminal histories, arrest records, or conviction records, in accordance with relevant laws. This includes compliance with the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.
Qualified individuals with a disability who require assistance during the application or recruitment process, have the right to request a reasonable accommodation. Please submit your request to ********************.
We kindly ask that applicants refrain from calling our office regarding job inquiries. All application-related questions should be directed to ********************. Thank you for your understanding.
Auto-ApplyManager, Information Security Compliance
Security engineer job in Glendale, CA
Department Description At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - and we're constantly looking for new ways to enhance these exciting experiences.
The Enterprise Technology mission is to deliver technological solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.
The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:
* Secure the Magic by protecting information systems and platforms.
* Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
* Strengthen the business through optimizing execution, application, and technology used to protect the Company.
* Innovate by investing in core capabilities to enhance operational efficiency.
Team Description:
Global Information Security (GIS) supports all of Disney's business segments, including Disney Entertainment & ESPN (DE&E). DE&E encompasses the operations of Disney's streaming services-Disney+, Hulu, ESPN+, Disney+ Hotstar, Star, and the upcoming Venu Sports streaming service-as well as Disney's broadcast and cable networks, including ABC, ESPN, FX, Disney Channels, and National Geographic. DE&E sits at the intersection of entertainment, sports, and technology, striving to connect viewers with beloved stories while advancing the streaming industry with consumer-first innovations. Security professionals supporting DE&E work with industry-leading technologies to deliver world-class, highly secure services to customers.
What You'll Do:
* Independent audit support for:
* SOX 404 ITGCs
* PII
* PCI
* ISPS
* Collaborate with Enterprise Controls and Compliance (ECC) to scope systems and respective ITGCs.
* Perform control health checks and remediation testing procedures to address issues identified via audit assessments, access control reviews, internal or external audits and/or other assessments.
* Develop and lead the Control Assurance Programs (ISPS and SOX).
* Lead Audit Readiness efforts to ensure proper system scoping and respective ITGCs, control validations and timely program onboarding.
* Participate in audit walkthrough meetings to help establish internal testing procedures to gain operational comfort in the design of the Company's automated controls.
* This includes control self-evaluations of new controls or processes that impact the effectiveness of an existing control.
* Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment.
* Work with management and internal audit on maintaining the master Risk and Control Matrix over the systems material to Disney Entertainment and ESPN (Broadcast TV and Streaming - Hulu, Disney+, ESPN+, STAR+ products)
* Ensure for timely management response of audit findings into our corporate SOCD/SAD.
* Oversee ISPS Management Audit coordination and open action plans.
* Provide consultancy to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands.
* Management of GRC workflows around coordination of certifications and attestations.
* Partner with leadership to support the PCI-DSS compliance program.
* Develop training materials, coordinate training sessions, and monitor compliance with training requirements.
* Oversee and manage a team of compliance analysts, ensuring day-to-day operations run smoothly and efficiently.
* Assign tasks and projects to team members based on priorities, deadlines, and individual strengths.
* Provide executive level updates on Compliance programs
Must Haves (Years of Experience, languages, programs, tools, etc.):
* Minimum of 8 years of related work experience, with 3 in management roles
* IT SOX experience and proven experience in supporting IT audit/compliance functions
* Experience in managing people
* Thorough understanding of SOX ITGC and ICFR 404 standards and audit objectives
* Interpersonal skills with the ability to work with teams cross-functionally
* Strong verbal and written communication skills and ability to effectively communicate to technical and non-technical audiences, including developers and tech operators
* Detail-oriented but able to understand the big picture. Highly organized and efficient
* Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
* Experience with cloud-based services, specifically AWS
Nice To Haves (see above):
* Experience and knowledge of NIST framework, ISO 27001, K-ISMS, GDPR
* Experience working with companies that have a heavy microservice architecture
Education:
Bachelor's degree in Computer Science, CPA license, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience
The hiring range for this position in Glendale, CA and Santa Monica, CA is $141,900 to $190,300 per year and in New York, NY is $148,700 to $199,400 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
About The Walt Disney Company (Corporate):
At Disney Corporate you can see how the businesses behind the Company's powerful brands come together to create the most innovative, far-reaching and admired entertainment company in the world. As a member of a corporate team, you'll work with world-class leaders driving the strategies that keep The Walt Disney Company at the leading edge of entertainment. See and be seen by other innovative thinkers as you enable the greatest storytellers in the world to create memories for millions of families around the globe.
About The Walt Disney Company:
The Walt Disney Company, together with its subsidiaries and affiliates, is a leading diversified international family entertainment and media enterprise that includes three core business segments: Disney Entertainment, ESPN, and Disney Experiences. From humble beginnings as a cartoon studio in the 1920s to its preeminent name in the entertainment industry today, Disney proudly continues its legacy of creating world-class stories and experiences for every member of the family. Disney's stories, characters and experiences reach consumers and guests from every corner of the globe. With operations in more than 40 countries, our employees and cast members work together to create entertainment experiences that are both universally and locally cherished.
This position is with Disney Worldwide Services, Inc., which is part of a business we call The Walt Disney Company (Corporate).
Disney Worldwide Services, Inc. is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, religion, color, sex, sexual orientation, gender, gender identity, gender expression, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information or disability, or any other basis prohibited by federal, state or local law. Disney champions a business environment where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a constantly evolving world.
Apply Now Apply Later
Current Employees Apply via My Disney Career
Explore Location