Content Security, Operations & Support, Manager, APAC

The Disney Entertainment Sensitive Information Protection (DE-SIP) group serves as a global center of excellence focused on the proactive protection of the company’s most sensitive information, content creation workflows, and media assets.

The Content Security, Operations & Support, Manager (APAC) will report to the Senior Manager, DE-SIP International Operations and is responsible for owning and driving SIP programs and operations across the APAC region.

Program Ownership & Operations (APAC)

• Own and lead the end-to-end SIP program for the APAC region, ensuring consistent execution aligned with global standards and regional business requirements
• Direct the assessment, governance, and ongoing oversight of sensitive information workflows, across both internal teams and third-party partners
• Establish and drive operational cadence, reporting, and performance tracking, delivering insights to leadership on program effectiveness, risks, and opportunities
• Partner with regional and global stakeholders to ensure consistent application of security controls and compliance requirements

Strategic Planning & Program Development

• Lead the design and evolution of SIP strategies and initiatives in APAC, aligned to business priorities and content security risk landscape
• Identify and drive opportunities to enhance services, streamline workflows, and improve risk mitigation approaches
• Serve as a key contributor to global SIP program strategy, ensuring regional insights and requirements are incorporated
• Build and maintain strong stakeholder partnerships across business segments, production security, and global SIP teams

Cross-Functional Leadership

• Act as a primary point of contact for SIP in APAC, influencing stakeholders across business, technical, and production environments
• Drive alignment across global core team (US, EMEA) and regional partners, ensuring consistent delivery of SIP services
• Lead coordination with external assessors, vendors, and service providers to ensure adherence to Disney’s security standards

Specific Responsibilities

Third-Party Risk Management & Assessment

• Own the strategy and execution of third-party and production security assessment programs across APAC
• Ensure all partners are appropriately assessed, risk-tiered, and governed using internal systems and frameworks
• Establish and drive ongoing monitoring, reassessment, and compliance validation
• Ensure training and readiness standards are met prior to access to sensitive assets

Workflow & Systems Security

• Lead end-to-end assessment and enhancement of sensitive information workflows and systems, identifying vulnerabilities and driving remediation
• Establish scalable approaches to ensure consistent protection across production and post-production environments
• Drive continuous improvement based on evolving risks, technologies, and business needs

Policy Enforcement & Risk Governance

• Ensure implementation and enforcement of security policies and best practices across internal teams and third-party partners
• Provide subject matter expertise on industry standards and regulatory expectations, influencing adoption across stakeholders
• Serve as a decision-maker and escalation point for risk-based security determinations

Incident Management

• Lead regional response coordination for SIP-related incidents, including remediation and root cause analysis
• Partner with global teams to ensure consistent incident response and lessons learned integration

Reporting & Insights

• Own the development and delivery of executive-level reporting and insights on SIP program performance
• Provide data-driven recommendations to leadership on risk posture, trends, and mitigation strategies
• Develop scalable reporting mechanisms to support ongoing decision-making

Preferred Experience and Qualifications

• 5+ years of experience in media security, information security, or related fields
• Demonstrated experience leading programs or initiatives with regional or global scope
• Proven ability to translate complex security requirements into scalable, business-aligned solutions
• Experience driving end-to-end project or program ownership, from design through execution and optimization
• Strong experience with third-party risk management, security assessments, and compliance frameworks
• Track record of influencing stakeholders and driving outcomes in a matrixed, global organization
• Experience operating in media production, content protection, or entertainment environments preferred

Technical & Industry Knowledge

• Familiarity with industry frameworks (e.g., MPA Trusted Partner Network, NIST)
• Understanding of media workflows, including production and post-production environments
• Knowledge of content protection technologies (e.g., encryption, watermarking, secure transfer tools)
• Experience evaluating physical and/or remote site security controls

Multidisciplinary Skillset Requirements

• Experience within the Media & Entertainment industry strongly preferred
• Working knowledge of media security principles, including content protection, encryption, and custody of media assets
• Understanding of media production and post-production workflows, systems, and distribution processes
• Ability to operate effectively in complex, matrixed, and global environments
• Strong program and project management skills, with the ability to manage workstreams from planning through execution
• Proven ability to prioritize and manage multiple initiatives in a fast-paced environment
• Strong stakeholder engagement and communication skills, with the ability to translate complex concepts into clear, actionable insights
• Ability to partner with technical and non-technical stakeholders to drive outcomes
• Highly collaborative, proactive, and capable of working independently with ownership and accountability
• Experience working with cross-functional SMEs to gather requirements and develop business-facing documentation
• Proficiency with standard collaboration and productivity tools (e.g., Microsoft 365, Teams, Slack, Zoom) and ability to quickly adapt to new technologies
• Demonstrates professionalism and sound judgment when engaging with internal and external partners, representing the organization with integrity

Job-Related Education

• Bachelor’s degree in Project Management, Information Systems, IT Engineering, or Business Administration.
• PMP/SAFe/Scrum certifications are a plus.
• CISSP, CCSP, CISM, CompTIA Security certifications are a plus.
• SDLC in media environment is a plus.