Responsibilities
The GRC Risk Service Lead is responsible for developing, implementing, and maturing NBCUniversal's information security risk framework to help ensure risks are consistently and effectively identified, prioritized, articulated, and reported in support of NBCUniversal Business Groups. Responsibilities also include providing PMO support to GRC Risk initiatives as needed.

• Develop, implement, and mature security risk management framework, including risk methodology, risk acceptance process, and risk reporting and metrics
• Establish, maintain, and mature security risk register
• Complete third-party risk assessments
• Review vendor controls
• Identify risk
• Document remediation plans
• Peer review risks identified by Risk Management team
• Gather, analyze, and report status and metrics on risks, controls and issues including coverage metrics, KRIs and KPIs
• Manage and mature risk management dashboards and reports to inform risk prioritization, risk remediation, and management decision making
• Support integration and maturation of policy, risk, and control frameworks
• Liaise with business area information security officers and security contacts, application owners, control owners, and SMEs such as Information Security, Internal Audit, and specialized risk management teams

Job Number
66642BR

Posting Category
Technology - Engineering

Country
United States

Sub-Business
Cyber Security

About Us
NBCUniversal owns and operates over 20 different businesses across 30 countries including a valuable portfolio of news and entertainment television networks, a premier motion picture company, significant television production operations, a leading television stations group, world-renowned theme parks and a premium ad-supported streaming service.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. We strive to foster a diverse and inclusive culture where our employees feel supported, embraced and heard. We believe that our workforce should represent the communities we live in, so that together, we can continue to create and deliver content that reflects the current and ever-changing face of the world. Click here to learn more about Comcast NBCUniversal's commitment and how we are making an impact.

State/Province
Multiple Locations

Career Level
Experienced

Qualifications/Requirements• Minimum 5 years of experience in Information Security, with practical experience in implementing information security risk frameworks and methodologies• Bachelor 's degree, preferably in Information Systems, Engineering, or related field(s)• Practical understanding of security and risk frameworks such as ISO 27001/2, ISO 31000, NIST 800-53, PCI DSS• Experience in qualitative and quantitative risk assessment• Experience in the areas of risks and controls across various IT platforms, web, middleware, cloud services (IaaS, PaaS, SaaS), database, operating systems, infrastructure, and social media• Program and project management experience with process change implementation• CISSP, CISA, CISM, CRISC, or similar industry certification(s) desirable• Self-starter, able to work independently and as part of a team• Strong analytical, research, and problem-solving skills with a keen attention to detail• Strong written, verbal communication and organizational skills• Able to communicate complex technology risk assessment information to non-technical business leaders to ensure they comprehend the risk being assigned to them• Able to discern business relevant risk associated with technology control deficiencies• Knowledge of the risks relevant to Media and Entertainment industry desirable

#LI-DNP

City
See List Below

Notices
NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories in a manner consistent with relevant legal requirements, including the City of Los Angeles Fair Chance Initiative For Hiring Ordinance, where applicable.

NBCUniversal is an equal opportunity employer and will provide reasonable accommodations as required by applicable federal, state, and/or local laws.

Multiple Locations
Englewood Cliffs - New Jersey, Miami - Florida, New York - New York, Orlando - Florida, Philadelphia - Pennsylvania, Stamford - Connecticut, Universal City - California