IT GRC Analyst (Cyber Contract Management) - Remote

Overview

NBCUniversal is seeking an experienced Governance, Risk, and Compliance (GRC) Analyst to support various functions within the Security Assurance – Governance team. The ideal candidate will have a strong understanding of cybersecurity, vendor contracts, negotiation of third party security standards, and the ability support additional governance functions like 3rd Party Security Reviews.

In Short

• Collaborate with business leadership, Legal, Procurement, and Cyber to review terms and conditions.
• Undertake research as needed when control or regulatory questions arise.
• Track status of risk remediations in the risk register.
• Monitor completeness and sustainability of remediation efforts.
• Educate and raise awareness on risks and controls.
• Contribute to overall program enhancements and drive automation.
• Maintain deep understanding of organization-wide objectives and risks.
• Stay abreast of current and emerging information risks.
• Perform other related duties and special projects as assigned.

Requirements

• Bachelor's degree or equivalent experience.
• Minimum of 2 years of experience in IT Governance, Risk or Compliance functions.
• Knowledge of IT Risk Frameworks such as NIST, ISO, CSA, PCI, etc.
• Knowledge of contracting lifecycle.
• Ability to work independently and in cross-functional teams.
• Strong analytic skills for problem analysis and resolution.
• Experience in process management systems like Jira, Azure DevBoards, ServiceNow.
• Experience with the MS office suite – Excel, PowerPoint, Word etc.
• Strong written/verbal communication and organizational skills.

Benefits

• Medical, dental and vision insurance.
• 401(k) plan.
• Paid leave.
• Tuition reimbursement.
• Variety of other discounts and perks.