Lead Compliance Analyst

Technology is at the heart of Disney’s past, present, and future. Disney Entertainment and ESPN Product & Technology is a global organization of engineers, product developers, designers, technologists, data scientists, and more – all working to build and advance the technological backbone for Disney’s media business globally. 

The team marries technology with creativity to build world-class products, enhance storytelling, and drive velocity, innovation, and scalability for our businesses. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers. We work with every part of The Walt Disney Company’s media portfolio to advance the technological foundation and consumer media touch points serving millions of people around the world.  

Here are a few reasons why we think you’d love working here: 

Building the future of Disney’s media: Our Technologists are designing and building the products and platforms that will power our media, advertising, and distribution businesses for years to come. 

Reach, Scale & Impact: More than ever, Disney’s technology and products serve as a signature doorway for fans' connections with the company’s brands and stories. Disney+. Hulu. ESPN. ABC. ABC News…and many more. These products and brands – and the unmatched stories, storytellers, and events they carry – matter to millions of people globally.  

Innovation: We develop and implement groundbreaking products and techniques that shape industry norms, and solve complex and distinctive technical problems. 

The Business Operations team helps guide and articulate technology strategy and research, and is responsible for driving the day-to-day operation of the Product & Technology organization, including: project and portfolio management and tracking; organization-level capital, space, and resource management and allocation; process management; technical incident management; and our administrative and workplace experience support team.

Job Summary:

The Lead Compliance Analyst will serve as a key member of the DE&E Product & Technology coordination team, partnering closely with TWDC GIS and other security and regulatory groups across TWDC, as well as stakeholders throughout DE&E Product & Technology Pillars.

This role will own and manage SOX and PII compliance activities, including user access reviews, governance, and administrative functions as part of the attestation cycle, transitioning these responsibilities from CDI teams. The analyst will ensure quarterly compliance and lead readiness efforts for certifications, attestations, security assessments (internal and third-party), and user access reviews (UARs).

In addition to maintaining compliance, the analyst will ensure all SOX and PII campaigns are executed accurately and that corrective actions are implemented promptly. They will also drive process improvement by streamlining workflows and implementing automation to replace manual tasks.

Additional responsibilities include:

• Building strong relationships within CDI to identify and communicate compliance risks.

• Establishing governance frameworks and fostering a positive compliance culture.

• Defining and refining processes to support regulatory requirements and external audit expectations.

• Innovating and improving operational efficiency through automation and best practices.

This position requires a proactive leader who can balance compliance obligations with continuous improvement, ensuring DE&E Product & Technology remains aligned with internal policies and external regulatory standards.

Responsibilities:

• Own and manage SOX and PII compliance activities, including user access reviews, governance, and administrative functions as part of the attestation cycle; ensure timely and accurate evidence collection and storage.

• Ensure all SOX and PII campaigns are executed accurately and that corrective actions are implemented promptly to maintain compliance and address gaps.

• Lead the transition of compliance responsibilities from CDI teams, including moving from manual user access reviews to automated processes.

• Coordinate compliance campaigns such as certifications/attestations, security assessments (internal and third-party), user access reviews (UARs), and quarterly/annual risk assessments.

• Streamline and automate compliance processes to improve efficiency, reduce operational risk, and support implementation of tools for compliance reporting and management.

• Establish governance frameworks and foster a positive compliance culture, defining effective processes aligned with regulatory and audit requirements; enforce ISPS policy across teams.

• Serve as liaison between engineering teams and audit/security groups, ensuring clear communication and timely delivery of regulatory and non-regulatory compliance activities.

• Monitor and audit programs and processes, conducting routine internal reviews and producing standard/ad hoc reports on compliance status for leadership.

• Identify and communicate compliance risks, providing support to management in risk mitigation and ensuring operational processes meet compliance standards.

• Coordinate across multiple teams using technology, ensuring policies and processes are implemented effectively without disrupting day-to-day operations.

• Develop subject matter expertise in DE&E Product & Technology products and applications to lead compliance campaigns and governance activities.

Basic Qualifications:

• 7+ years of analytical, project management, or other relevant experience preferred

• Bachelor's degree or equivalent experience in compliance and security compliance sectors

• Strong communication skills, as well as written and verbal presentation skills

• Demonstrated experience leading or managing large projects that span organizational units

• Basic knowledge of the entertainment industry and digital content delivery terminology and technology

 

The hiring range for this position in California is $129,300 to $173,300 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.