Enterprise GRC Applications Developer

Summary

Join NBCUniversal Cyber Security as a Staff Enterprise Applications Analyst within the Governance, Risk and Compliance (GRC) Team to lead complex initiatives, provide technical guidance, and enhance operations with GRC organization.

Requirements

• 5+ years of work experience in IT/GRC with direct responsibility for GRC/ERM tools (RSA Archer, ServiceNow, MetricStream, SAP GRC, etc.)
• 2+ years developing API integrations
• 2+ years of work experience developing reports and actionable metric dashboards for executive visibility and enhanced operations
• Bachelor’s Degree in Computer Science/Engineering/Information Security preferred or equivalent combination of education and relevant experience
• Ability to evaluate risks, understand control and develop governance processes to support the company and articulate issues, develop consensus, raise awareness, and provide and implement solutions
• Knowledge of common information technology management frameworks such as ISO/IEC 27001, ITIL, COBIT, CIS and NIST
• Knowledge and understanding of relevant legal, regulatory and privacy requirements
• Strong project management experience
• Ability to work collaboratively and effectively with a cross-section of the IT and Cyber teams and business organizations to implement information security standards and initiatives
• Solid knowledge of API frameworks
• Proficient in programming languages relevant to web and API development, such as Python, Java, JavaScript, Ruby, PHP, C#, and Go

Responsibilities

• Provides technical leadership in development of processes for solutions across GRC and in alignment with business and cyber technology objectives
• Demonstrates expert knowledge of GRC concepts, processes, and tools, including technical integrations
• Identifies use cases for technical capabilities and customer requirements
• Conducts hands-on evaluations of existing or proposed GRC solutions
• Leads activities in the development of new GRC solutions, its technical integrations through API development, and supporting processes
• Demonstrates experience in capturing requirements and leading the development of a GRC workflow tool, including planning, design, development, testing, implementation, and ongoing support
• Subject Matter Expert in a GRC platform, conducting hands-on leadership in the implementation and configuration of the solution
• Assists in the design and manages the reference/process architectures supporting the GRC tool, risk processes/tracking/acceptance, control framework mapping
• Develops data driven Key Performance and Risk Indicator dashboards
• Develops integrations from other tools to collect metrics that inform executives’ risk and compliance position
• Actively builds and strengthens relationships with key stakeholders as a lead contributor towards the GRC strategy
• Skilled at communicating complex technical information to customers and teams with varying levels of technical understanding

Benefits

• Fully Remote
• Medical, dental and vision insurance
• 401(k)
• Paid leave
• Tuition reimbursement