[Hiring] Lead IT GRC Analyst @NBCUniversal

Role Description

The Lead IT GRC Analyst will lead the operational execution, integration, and continuous improvement of the Cyber Governance & Controls function. This role will support turning a broad portfolio of governance work into a coordinated, measurable enterprise service.

The successful candidate will serve as the operational leader connecting Governance strategy to day-to-day execution. The role will partner across various departments to establish clear ownership, decision rights, evidence, review cadences, exception paths, and sustainable control outcomes.

This role enables delivery across eight connected service lines:

• Policy and standards lifecycle management
• Security baselines and control governance
• Vendor security management
• Continuous third-party monitoring
• GRC tooling and workflow automation
• Data protection governance
• Program governance advisory
• Regulatory, audit, and standards interpretation

Responsibilities

• Develop, implement, and continuously improve Governance operating procedures, playbooks, lifecycle schedules, decision records, and recurring operating rhythms.
• Coordinate policy forums, standards review, governance working sessions, steering decisions, escalations, action-item closure, and quarterly operating reviews.
• Serve as coordinator for the Global Cybersecurity Governance Steering Committee, including agenda planning, materials, stakeholder alignment, decision tracking, action-item follow-through, and governance reporting.
• Chair the Global Cybersecurity Governance Working Group, facilitating cross-functional discussion, driving alignment on governance priorities, escalating decisions as needed, and ensuring actions are assigned, documented, and completed.
• Define and maintain roles, decision rights, RACIs, reviewers, approvers, accountable service owners, evidence expectations, and exception paths across Governance services.
• Establish a consistent definition of done for governance outcomes spanning ownership, documented requirements, operational process, automation, monitoring, metrics, exceptions, and recurring review.
• Separate administrative, technical, and operational governance so that requirements are not only approved, but implemented, monitored, evidenced, and sustained.
• Operate the end-to-end lifecycle for cyber policies, standards, configuration baselines, procedures, and supporting guidance.
• Maintain the Cyber Policy Library, authoritative document hierarchy, review calendar, approval evidence, version history, control mappings, glossary, and publication quality controls.
• Coordinate development and renewal of Cybersecurity Risk Acceptance Memoranda.
• Support requirement-centric governance by mapping policies, standards, baselines, and controls to authoritative frameworks.
• Maintain the Cyber Governance & Controls service catalog.
• Coordinate operational visibility across policy and standards, control baselines, vendor security, continuous third-party monitoring, GRC tooling, data protection, governance advisory, and audit and standards interpretation.
• Develop and administer common intake, triage, prioritization, status, decision, escalation, evidence, and closure practices.
• Measure demand, throughput, aging, adoption, quality, stakeholder experience, control effectiveness, and operational health across the Governance portfolio.
• Identify work already delivered through remediation and transformation programs.
• Improve self-service through clear guidance, reusable patterns, decision trees, communications, training, and content structured for both people and AI-enabled assistants.
• Develop and maintain Governance metrics, key performance indicators, scorecards, and dashboards.
• Produce executive updates, quarterly operating reviews, and portfolio health reporting.
• Track strategic initiatives, risks, dependencies, decisions, maturity objectives, and service performance.
• Translate complex Governance information into clear, business-oriented insights and leadership materials.
• Support execution of the Cyber Governance & Controls maturation strategy.
• Convert time-bound remediation and transformation initiatives into sustainable business-as-usual governance.
• Coordinate governance design for major programs.
• Advance GRC modernization by defining authoritative systems of record.
• Facilitate maturity assessments, current-state inventories, gap analysis, target operating models, governance gates, leadership decisions, roadmap milestones, and continuous-improvement plans.
• Partner with established program management teams while retaining ownership of Governance-specific operating models.
• Build productive partnerships across various departments.
• Facilitate stakeholder alignment, decision-making, communications, and socialization for Governance initiatives.
• Support organizational change and adoption activities associated with new or revised Governance services and processes.

Qualifications

• 5+ years of experience in governance, risk management, compliance, cybersecurity operations, business operations, service operations, or a related discipline.
• Bachelor’s degree or equivalent relevant professional experience.
• Experience establishing and managing operating processes, governance frameworks, service management practices, or control environments.
• Experience developing executive reporting, scorecards, dashboards, and performance measures.
• Demonstrated ability to coordinate work across multiple stakeholders and functions in a complex organization.
• Exceptional written and verbal communication skills.
• Strong written, verbal, facilitation, analytical, and organizational skills.

Requirements

• Experience supporting Governance, Risk and Compliance, cybersecurity, audit, third-party risk, or enterprise risk functions.
• Knowledge of governance frameworks, controls management, policy management, and enterprise operating models.
• Experience with ServiceNow IRM, LogicGate, Archer, Jira, or comparable governance and workflow platforms.
• Familiarity with frameworks and standards such as NIST, ISO 27001, PCI DSS, or CIS.
• Demonstrated success driving operational excellence, process improvement, stakeholder adoption, and organizational change.
• Ability to translate complex governance requirements into practical, sustainable business processes.
• Exceptional attention to detail, with a commitment to accuracy, consistency, completeness, and high-quality deliverables.
• Self-directed, collaborative, and comfortable managing competing priorities in a highly matrixed environment.

Benefits

• This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks.
• Salary range: $110,000 - $140,000 (bonus eligible).