Manager, Content Security, Operations & Support, APAC

About the role

The Disney Entertainment Sensitive Information Protection (DE-SIP) group is a global center of excellence protecting sensitive information, content creation workflows and media assets. The Content Security, Operations & Support Manager (APAC) reports to the Senior Manager, DE-SIP International Operations and owns the SIP program and operations across the APAC region. The role leads security processes and third-party risk management frameworks, aligns them with global standards and addresses regional business needs, and acts as a regional subject matter expert.

Key responsibilities

• Own and lead the end-to-end SIP program for APAC, directing assessment, governance and oversight of sensitive information workflows across internal teams and third-party partners
• Set operational cadence, reporting and performance tracking, and partner with stakeholders on consistent application of security controls and compliance
• Lead design of SIP strategies and initiatives in APAC, contribute to global SIP strategy and build stakeholder partnerships
• Own third-party and production security assessment programs, risk tiering, ongoing monitoring, compliance validation and pre-access training
• Assess and improve sensitive information workflows and systems, and enforce security policies and best practices
• Lead regional incident response coordination, remediation and root cause analysis, and provide executive reporting and insights

Required profile

• 5+ years of experience in media security, information security or related fields
• Demonstrated experience leading programs with regional or global scope, in a matrixed, global organization
• Experience in media production, content protection or entertainment environments preferred
• Bachelor's degree in Project Management, Information Systems, IT Engineering or Business Administration
• PMP/SAFe/Scrum, CISSP/CCSP/CISM/CompTIA Security, SDLC in media and other certifications are a plus

Required skills

• Familiarity with frameworks such as MPA Trusted Partner Network and NIST
• Knowledge of content protection technologies (encryption, watermarking, secure transfer tools) and media workflows
• Experience with third-party risk management, security assessments and compliance frameworks
• Proficiency with Microsoft 365, Teams, Slack and Zoom