Lead IT GRC Analyst – Policy Management

Job not on LinkedIn

🔥 2 hours ago

🌐 Greece, United States – Remote

infoinfo

💵 $110k - $140k / year

⏰ Full Time

🟠 Senior

🎲 Risk

Where this job comes from

Posted on NBCUniversal's careers page, not through a job board

First seen by Remote Rocketship 2 hours ago

Logo of NBCUniversal

NBCUniversal

10,000+ employees

Founded 2004

📱 Media

Media • Entertainment

NBCUniversal is a leading global media and entertainment company known for creating and distributing content across a variety of platforms. With over 100 years of experience, it is a part of Comcast and encompasses brands like Peacock, NBC Sports, and many others to educate, entertain, and empower audiences around the world. The company is involved in television broadcasting, film production, and theme parks, and is also recognized for its initiatives in technology and corporate social responsibility. NBCUniversal is committed to innovation and social impact, making it a vibrant workplace for media and tech professionals.

📋 Description

• Lead the operational execution, integration, and continuous improvement of the Cyber Governance & Controls function • Develop and improve governance operating procedures, playbooks, lifecycle schedules, decision records, and recurring operating rhythms • Coordinate policy forums, standards reviews, governance working sessions, steering decisions, escalations, action-item closure, and quarterly operating reviews • Coordinate the Global Cybersecurity Governance Steering Committee and chair the Global Cybersecurity Governance Working Group • Define and maintain roles, decision rights, RACIs, reviewers, approvers, accountable service owners, evidence expectations, and exception paths • Operate end-to-end lifecycle management for cyber policies, standards, configuration baselines, procedures, and guidance • Maintain the Cyber Policy Library, document hierarchy, review calendar, approval evidence, version history, control mappings, glossary, and publication controls • Coordinate Cybersecurity Risk Acceptance Memoranda, corrective-action plans, approval records, reporting, and retirement criteria • Maintain the Cyber Governance & Controls service catalog and common intake, triage, prioritization, status, decision, escalation, evidence, and closure practices • Measure demand, throughput, aging, adoption, quality, stakeholder experience, control effectiveness, and operational health • Develop governance metrics, KPIs, scorecards, dashboards, executive updates, quarterly operating reviews, and portfolio health reporting • Support governance maturation, transformation, automation, maturity assessments, gap analysis, target operating models, governance gates, and roadmap milestones • Advance GRC modernization across ServiceNow IRM, LogicGate RiskCloud, Jira, risk hubs, policy repositories, dashboards, and evidence sources • Partner with Cybersecurity, Operations & Technology, Legal, Privacy, Audit, Procurement, and business stakeholders on alignment, decision-making, communications, and adoption

🎯 Requirements

• 5+ years of experience in governance, risk management, compliance, cybersecurity operations, business operations, service operations, or a related discipline • Bachelor’s degree or equivalent relevant professional experience • Experience establishing and managing operating processes, governance frameworks, service management practices, or control environments • Experience developing executive reporting, scorecards, dashboards, and performance measures • Ability to coordinate work across multiple stakeholders and functions in a complex organization • Exceptional written and verbal communication skills • Strong written, verbal, facilitation, analytical, and organizational skills • Experience supporting Governance, Risk and Compliance, cybersecurity, audit, third-party risk, or enterprise risk functions • Knowledge of governance frameworks, controls management, policy management, and enterprise operating models • Experience with ServiceNow IRM, LogicGate, Archer, Jira, or comparable governance and workflow platforms • Familiarity with NIST, ISO 27001, PCI DSS, or CIS • Understanding of AI governance principles, emerging AI risks, responsible AI practices, and integration of AI requirements into enterprise governance and control frameworks • Self-directed, collaborative, and comfortable managing competing priorities in a highly matrixed environment

🏖️ Benefits

• Medical, dental and vision insurance • 401(k) • Paid leave • Tuition reimbursement • Discounts and perks • Fully remote work arrangement

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok