GRC Analyst

The GRC Risk Analyst is responsible for conducting security risk assessments to help identify and articulate risk and risk treatment options in support of NBCUniversal Business Groups. Conduct and manage supplier security risk assessments from initiation to completion relating to identify, assess, measure and monitor information security risks to NBCU processes, assets, vendors, products and services Generate risk assessment reports to support management action, escalation, and risk acceptance processes resulting from risk assessments Liaise with business area information security officers and security contacts, application owners, control owners, and SMEs such as Information Security, Internal Audit and specialized risk management teams Communicate the importance of remediating the risks identified in a timely manner Facilitate development, prioritization and rationalization of risk mitigation action plans Support monitoring of remediation efforts to completion Review and analyze evidence of remediation completion Gather, analyze, and report status and metrics on risks and controls Support continued improvement initiatives related to risk assessment and management programs