Intern, Information Security - Jan to Jun 2025

Wherever you are in the amazing world of Disney, you are contributing to the stories of our iconic brands, recognised by audiences everywhere for entertainment, information and inspiration. Innovation, imagination and inclusion are at the core of Disney, defining the experience that we deliver as well as providing the foundation of our success. The scope of our business, combined with global growth and collaboration result in an inclusive employee experience characerised by continuous learning, development and achievement.
The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney's information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives.
In order to ensure that our services keep The Walt Disney Company (TWDC) secure, we follow an ongoing, iterative process, including continued re-evaluation of our services over time to address emerging threats as well as changes in business and technology. This process includes:
1. Analysis of known and emerging threats to determine risks against TWDC assets
2. Creation, maintenance, governance and communication of security policies and standards across TWDC
3. Assessment and audit of compliance against the security policies and standards
4. Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria
This role will gain exposure in security operational activities related to the ongoing identification, management and reporting of key security risks. This will include supporting the planning and execution of activities in collaboration with other lines of business in the delivery of Information Security initiatives across Asia Pacific (APAC).
The Intern, Information Security will support the team to develop and execute the cybersecurity risk and defence strategy. The mission will be to strengthen TWDC security posture through development of a sustainable and effective Information Security risk strategy and related initiatives/programme.
Responsibilities:

• Work closely with the wider Information Security team and our partners to drive the development and execution of end-to-end cybersecurity risk management initiatives
• Ensure compliance with engagement plans and internal cybersecurity policies and standards
• Support analysis of existing and future systems across the organization, review security risk assessments and attestations including training and awareness activities to proactively secure and protect TWDC from evolving cybersecurity threats
• Support key projects, reporting dashboards and security data analytics requirements
• Actively participates and supports brainstorming sessions and creates necessary documentation including presentation decks
• Contributes in updating application and system asset inventory enhancement for improved visibility
• Researches, learns, and evaluates solutions that supports the risk reduction strategy including emerging cybersecurity threats
• Support conduct of engagement with internal and external stakeholders to enhance overall cyber resilience of TWDC and its ecosystem

Internship Requirements:

• Currently an undergraduate pursuing a bachelor's degree
• Still an undergraduate and not yet graduated during the internship period
• Must be available for full-time internship commitment (Monday to Friday, 9am-6pm) between January to June 2025
• Indicate your internship availability (start and end date) in your resume
• Indicate your expected graduation date in your resume

*Please apply to this job posting only if you are available for a full-time internship during the stated period. Please note that only shortlisted candidates will be contacted.
Requirements:

• Pursuing a Bachelor's degree in in Engineering, Information Technology/Security, Cybersecurity and/or related fields
• Technical ability in security design and control implementation principles
• Possesses cyber domain knowledge across areas such as cybersecurity technology, network & infrastructure security, data & information protection, supply chain security, cyber architecture, cloud computing security, including compliance principles, standards, practices and data privacy
• Highly self-motivated and meticulous with a strong passion for Information Security
• Ability to adapt quickly to a constantly evolving organization and thrives in a fast-paced working environment
• Excellent cross-group and interpersonal skills, with the ability to communicate with technical and non-technical teams with a high level of enthusiasm
• Adopts a challenging and questioning approach, proposing information and solutions in creative ways to enable the business to continue in a secure manner
• Strong analytical and problem-solving abilities
• Passionate team player with a never-ending curiosity
• Self-starter that needs minimal supervision in motivating himself/herself, always looking for opportunities to contribute
• Ability to prioritize workload to meet competing deadlines and manage stakeholder expectations
• Creative mindset with the ability to leverage on data to support and develop strategy/decisions
• Proficient in Microsoft Office tools, such as Word, Excel, and PowerPoint
• Excellent command of written and spoken English with any additional regional language(s) a plus

The Walt Disney Company is an Equal Opportunity Employer. We strive to be a diverse workforce that is representative of our audiences, and where all can thrive and belong. We are committed to building a team that includes and respects a variety of voices, identities, backgrounds, experiences and perspectives.
#LI-DNI