GRC Analyst

The GRC Risk Analyst is responsible for conducting security risk assessments to help identify and articulate risk and risk treatment options in support of NBCUniversal Business Groups.Conduct and manage supplier security risk assessments from initiation to completion relating to identify, assess, measure and monitor information security risks to NBCU processes, assets, vendors, products and services Generate risk assessment reports to support management action, escalation, and risk acceptance processes resulting from risk assessmentsLiaise with business area information security officers and security contacts, application owners, control owners, and SMEs such as Information Security, Internal Audit and specialized risk management teamsCommunicate the importance of remediating the risks identified in a timely mannerFacilitate development, prioritization and rationalization of risk mitigation action plans Support monitoring of remediation efforts to completion Review and analyze evidence of remediation completionGather, analyze, and report status and metrics on risks and controlsSupport continued improvement initiatives related to risk assessment and management programs