Apply on Employer Site

Comcast · 1 day ago

Technical Advisor, Technology

PA - Philadelphia, 1701 John F Kennedy Blvd

Full-time

Onsite

Senior Level

5+ years exp

Comcast is a Fortune 50 leader in media and technology, seeking a Technical Advisor to provide advanced technical expertise across multiple audits. The role involves collaborating with audit teams, assessing risks, and delivering technical guidance in various technology environments.

InternetTelecommunicationsTVVideoWeb Hosting

H1B Sponsor Likely

Responsibilities

Cloud environments (i.e., AWS, Azure, GCP)

SDLC processes and secure code development

Mobile application stability and security

Web application stability and security

Common development languages (i.e., Java, Python, Ruby, PHP, .Net)

Network (LAN and WLAN) Access Control and Authentication implementation design and configuration (i.e., Cisco ISE, RSA)

IDS/IPS solutions (i.e., TippingPoint, Snort)

SIEM deployment and performance monitoring (i.e., Arcsight, Splunk)

Firewalls/VPNs/Proxies (i.e., Cisco, Palo Alto, Juniper, Blue Coat)

Linux Operating System security (i.e., RedHat/CentOS, Ubuntu, SuSE)

Windows Operating System security (i.e., Windows Server, Windows 11)

Leads inquiry and data analysis to understand security and technology operations, assess risk, and partners with engagement teams and leads in developing project scope for complex process areas

Conducts and leads training sessions to educate broader team on key technical aspects

Provides expertise to less technical engagement teams, technical advisors and helps with understanding and executing upon technical concepts and standards

Takes on ad-hoc projects to improve (e.g., automate) technology audit testing

Identify AI-related risks (e.g., model bias, data privacy, adversarial attacks)

Contributes to overall planning efforts for multiple engagements regarding technical testing timeline and approach

Examines records, documents, methods, policies, costs, and other factors to determine if areas are conducting operations in accordance with established policies/procedures, best practices, information security frameworks, and governmental and legal requirements

Formulates appropriate conclusions based on technical analysis. Combines knowledge of Company operations with testing results to determine the overall impact to the technical environment

Writes clear and meaningful audit comments and recommendations for action by management

Evaluates audit findings, recommends solutions for correcting control weaknesses, and prioritizes areas for management focus

Identifies opportunities for improvement to audit methodology, tools, and training

Supports department objectives and performs other duties and responsibilities, as assigned

Consistent exercise of independent judgment and discretion in matters of significance

Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) as necessary

Other duties and responsibilities as assigned

Demonstrates the ability to quickly relate complex business processes, applications, data, and organizations to identify and resolve business issues

Stays current on relevant business risks (e.g., current events, audit trends, emerging technologies, cyber security, etc.) and determines where appropriate to apply to engagements

Performs effectively as a project leader across complex engagements

Maintains a strong executive presence and demonstrates the ability to develop and maintain executive relationships

Shows flexibility in prioritizing and completing tasks

Exercises consistent judgment and discretion in matters of significance

Exhibits willingness to tackle new areas and challenging topics

Demonstrates the ability to work in a complex, dynamic, and fast-paced environment

Demonstrates ownership for projects and is accountable for ensuring all work is complete and/or requesting assistance as needed

Acts in accordance with stated CGA and company policies and practices and maintains the highest degree of integrity in all activities and interactions

Displays regular, consistent, and punctual attendance. Able to work nights and weekends, variable schedule(s), as necessary. Out-of-town travel approximately 40%

Exhibits strong interpersonal skills including written and verbal communications, and an ability to collaborate with others

Shows respect to other team members and clients in all interactions

Demonstrates a willingness to assist other team members in areas outside of direct assignments, when necessary

Collaborates in a virtual environment to complete projects with team members in various locations. However, the employee must be available for extended hours on occasion

Develops business partnerships proactively

Partners with internal CGA teams (e.g., FinOps and Data) across engagement activities

Includes business partners in engagement activities (e.g., CISO, Legal, Human Resources, Security, and Business Assurance), as needed

Provides coaching and guidance to more inexperience team members on an ad hoc basis

Utilizes available resources and tools to research and expand knowledge to enhance work product

Exhibits a commitment to continuously self-improve by working with leadership to leverage strengths and focus on areas of development

Gains knowledge of basic data analytics and cyber security concepts and applies to engagements

Exhibits desire to be a business expert within the Center of Excellence and provides assistance to Company management, as necessary

Assists less experienced team members with furthering their own development during the course of engagements

Develops an enterprise risk mindset by applying relevant business risks (e.g., current events, audit trends, cyber security, etc.)

Qualification

Cloud environmentsSDLC processesNetwork Access ControlIDS/IPS solutionsSIEM deploymentCommon development languagesOperating System securityAuditing ProceduresAudit ProcessesOrganizing

Required

Bachelor's Degree

5-7 Years of relevant work experience

Provides technical expertise across multiple audits and all aspects of the Internal Audit process including assessing risk, evaluating technical controls/operations, partnering with engagement teams, presenting during lunch/learns, and assisting other technical advisors to identify and evaluate issues related to the following: Cloud environments (i.e., AWS, Azure, GCP), SDLC processes and secure code development, Mobile application stability and security, Web application stability and security, Common development languages (i.e., Java, Python, Ruby, PHP, .Net), Network (LAN and WLAN) Access Control and Authentication implementation design and configuration (i.e., Cisco ISE, RSA), IDS/IPS solutions (i.e., TippingPoint, Snort), SIEM deployment and performance monitoring (i.e., Arcsight, Splunk), Firewalls/VPNs/Proxies (i.e., Cisco, Palo Alto, Juniper, Blue Coat), Linux Operating System security (i.e., RedHat/CentOS, Ubuntu, SuSE), Windows Operating System security (i.e., Windows Server, Windows 11)