NBCUniversal · 10 hours ago
GRC Analyst
Englewood Cliffs, NJ
Full-time
Remote
Mid Level
$70K/yr - $90K/yr
3+ years exp
Maximize your interview chancesBroadcastingMedia and Entertainment
Insider Connection @NBCUniversal
Get 3x more responses when you reach out via email instead of LinkedIn.
Responsibilities
Conduct and manage supplier security risk assessments from initiation to completion relating to identify, assess, measure and monitor information security risks to NBCU processes, assets, vendors, products and services
Generate risk assessment reports to support management action, escalation, and risk acceptance processes resulting from risk assessments
Liaise with business area information security officers and security contacts, application owners, control owners, and SMEs such as Information Security, Internal Audit and specialized risk management teams
Communicate the importance of remediating the risks identified in a timely manner
Facilitate development, prioritization and rationalization of risk mitigation action plans
Support monitoring of remediation efforts to completion
Review and analyze evidence of remediation completion
Gather, analyze, and report status and metrics on risks and controls
Support continued improvement initiatives related to risk assessment and management programs
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
Minimum 3+ years’ experience in Information Security, with practical experience in risk assessment and risk management
Bachelor's degree, preferably in Computer Science, Information Systems, Engineering or related field(s)
In-depth Cyber and IT security knowledge and understanding of operations, systems evaluation, and architecture
Demonstrated experience using industry standards and frameworks to implement best practices in cybersecurity risk management in IT platforms, web, middleware, cloud services (IaaS, PaaS, SaaS), database, operating systems, infrastructure and social media
Technical Cyber Security Certification through one of the following bodies: SANS, ISACA, (ISC)2, CompTIA, etc.
Practical understanding of security, risk and privacy regulatory frameworks such as ISO 27001/2, ISO 31000, NIST 800-53, SOX, PCI DSS, HIPAA
Self-starter, able to work independently and as part of a team
Strong analytical, research, and problem solving skills with a keen attention to detail
Strong written, verbal communication and organizational skills
Able to communicate complex technology risk assessment information to non-technical business leaders
Able to discern business relevant risk associated with technology control deficiencies, and to identify the corresponding remediation which is required to mitigate the risk
Preferred
Knowledge of the risks relevant to Media and Entertainment industry desirable
Benefits
Medical, dental and vision insurance
401(k)
Paid leave
Tuition reimbursement
A variety of other discounts and perks
Company
NBCUniversal
NBCUniversal is a media company that provides entertainment and news development, production, distribution, and marketing services. It is a sub-organization of Comcast.
10001+ employees
H1B Sponsorship
NBCUniversal has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2023 (32)
2022 (87)
2021 (44)
2020 (50)
Funding
Current Stage
Late StageTotal Funding
unknown2011-01-29Acquired
Leadership Team
Jeff Shell
CEO
Stephen Burke
Chief executive officer
Recent News
2024-12-11
sportsbusinessjournal.com
2024-12-04
Company data provided by crunchbase
