Lead Technical GRC Analyst (Governance)

• Manage the organization's security governance program including participating in Cyber-led projects and programs to design and develop cyber governance processes.
• Demonstrated experience supporting and operating complex enterprise-scale IT platforms with a wide and varied customer base where reliability security and governance are mission critical.
• Serve as a trusted technical and governance resource for core Enterprise IT platforms with the capability to provide practical support to ensure security resilience and consistency across large-scale business-critical tools.
• Maintaining an effective feedback loop with business partners - seeking and integrating business area feedback into cyber governance processes.
• Contribute to overall program enhancements and drive automation with various IT and Cybersecurity stakeholders.
• Participate in development review and implementation of security policies standards procedures and guidelines in alignment with industry frameworks (e.g. ISO 27001 NIST CIS).
• Serve as point of contact for internal audits certifications and compliance initiatives related to policy and governance.
• Actively consult with stakeholders throughout the development lifecycle of small projects and large-scale programs to help establish refine and validate governance processes.
• Conduct technical assessments of configurations to ensure security effectiveness.
• Monitor regulatory changes and emerging risks to ensure policies remain compliant and adaptive to future threats.
• Use advanced technologies-e.g. robotic process automation and AI/machine learning-to improve operation.
• Provide hands-on technical control review to support guidance of enterprise configurations of tools like M365 Slack Microsoft Defender for Cloud etc.
• Design and develop GRC metrics including KPIs and KRIs.

• 4+ years of experience in information security governance risk or compliance roles.
• Strong and proven communication (both verbal and written) and customer engagement skills with experience in briefing corporate executives and professionals.
• Familiarity with industry standards and frameworks (e.g. NIST CSF ISO 27001 CIS Benchmarks SOC 2).
• Ability to read and interpret technical documentation and translate it into governance mandates.
• Strong analytical and communication skills with the ability to translate complex security concepts into business language.
• Experience performing system integration system management and configuring native controls in modern enterprise IT tooling.
• Experience working with technical teams to implement and validate secure configurations.
• Comfortable working in fast-paced ambiguous or evolving environments with a solution-oriented mindset.
• Ability to balance governance rigor with creativity and adaptability in a business-centric approach.
• Bachelor's Degree in an IT related field and/or equivalent work experience.

• Previous experience working in multiple large complex environments and specifically within the Governance Risk and Compliance functions.
• Previous experience working in Governance Risk and Compliance functions in the media entertainment federal and/or advanced technology industries.
• Experience with other enterprise technologies (e.g. Active Directory/Azure AD cloud platforms configuration assessment tools)
• Experience with GRC platforms (e.g. OneTrust ServiceNow GRC Archer).
• Background working with legal procurement or privacy teams.
• Industry certifications such as CRISC CISA CISSP or technical certifications (e.g. Microsoft 365 Certified AWS Security Specialist) are a plus.

• Fully Remote: This position has been designated as fully remote meaning that the position is expected to contribute from a non-NBCUniversal worksite most commonly an employee's residence.

What We Do

From film television news theme parks interactive media and streaming our people are at the center of it all. ​Here we solve complex and business-critical problems. That’s why we’re looking for people to help us continue our evolution imagining and delivering the most innovative and disruptive products and services through the latest tech advancements in the industry. ​ Here you can develop solutions. You’ll develop solutions that allow engineers to broadcast live TV from the comfort of their homes. These solutions will enable the use of our collection of hundreds of thousands of distinct intellectual properties across our film television and streaming brands. Here you can transform. You’ll make decisions and solve complex problems by leveraging insights that come from data building AI to help enable solutions to optimize every aspect of our content eco-system. Here you can build. You’ll build emerging immersive technologies that are used to power the broadcasts and streaming of global events like the Super Bowl and Olympics. You can create secure elastic cloud-based services connecting parts of our global platform ecosystem that effect tens of millions of viewers consumers and businesses that consume and love NBCUniversal’s content. And while you design build and architect your career we have the culture to make sure you’re supported. Here you can work and still live your best life! We’re leaders in our fields. We hire smart people and trust them to get the job done. We are never too busy to develop a fellow colleague. We understand our goals – or we ask. When we see something that needs doing – we do it. We make data-driven decisions. We fiercely believe in our talent and their growth. If you're ready to make an impact here you can.

Why Work With Us

For us it's more than just a work life. It's a daily passion. We take great pride in our legacy. We find fun in the challenge. We collaborate and inspire others. We're always creating always solving and always ahead of competition.

Gallery