Staff Enterprise GRC Developer

Summary

Join NBCUniversal Cyber Security as a Staff Enterprise GRC Developer! This role offers advanced technical leadership within the Governance, Risk, and Compliance (GRC) team, focusing on GRC application development, dashboards, metrics, and data science. You will lead complex initiatives, mentor team members, and enhance GRC operations. The ideal candidate possesses strong application and process development experience, along with excellent stakeholder relationship-building skills. This fully remote position offers competitive compensation and a comprehensive benefits package, including medical, dental, vision, 401k, paid leave, and tuition reimbursement.

Requirements

• 5+ years of work experience in IT, GRC, and/or Cybersecurity with direct responsibility for workflow tool development (RSA Archer, Diligent, SAP, etc.)
• 2+ years developing API integrations
• 2+ years of work experience developing reports and actionable metric dashboards for executive visibility and enhanced operations
• Bachelor’s degree in Computer Science/Engineering/Information Security preferred or equivalent combination of education and/or relevant experience
• Ability to evaluate risks, understand control and develop governance processes to support the company and articulate issues, develop consensus, raise awareness, and provide and implement solutions
• Knowledge of common information technology management frameworks such as ISO/IEC 27001, ITIL, COBIT, CIS and NIST
• Knowledge and understanding of relevant legal, regulatory and privacy requirements
• Strong project management experience
• Ability to work collaboratively and effectively with a cross-section of the IT and Cyber teams and business organizations to implement information security standards and initiatives
• Solid knowledge of API frameworks
• Proficient in programming languages relevant to web and API development, such as Python, Java, JavaScript, Ruby, PHP, C#, and Go
• Willingness and ability to explore and use new systems, standards, and protocols
• Must be able to apply API design principals to create the best solution for the organization
• Be able to optimize resource access and iterate on existing design
• Understanding the threat driven methodologies, SDLC, threat modeling and attack trees
• Ability to clearly present complex and technical concepts and techniques to others
• Excellent written and spoken communication skills
• Effective in building partnerships with organizational leaders and influencing senior management
• Ability to manage multiple projects with changing/shifting/dynamic priorities

Responsibilities

• Provide technical leadership in development of processes for solutions across GRC and in alignment with business and cyber technology objectives
• Demonstrate expert knowledge of GRC concepts, processes, and tools, including technical integrations
• Identify use cases for technical capabilities and customer requirements
• Conduct hands-on evaluations of existing or proposed GRC solutions
• Lead activities in the development of new GRC solutions, its technical integrations through API development, and supporting processes
• Demonstrate experience in capturing requirements and leading the development of a GRC workflow tool, including planning, design, development, testing, implementation, and ongoing support
• Subject Matter Expert in a GRC platform, conducting hands-on leadership in the implementation and configuration of the solution
• Assist in the design and manage the reference/process architectures supporting the GRC tool, risk processes/tracking/acceptance, control framework mapping
• Develop data driven Key Performance and Risk Indicator dashboards
• Develop integrations from other tools to collect metrics that inform executives’ risk and compliance position
• Actively build and strengthen relationships with key stakeholders as a lead contributor towards the GRC strategy
• Skilled at communicating complex technical information to customers and teams with varying levels of technical understanding

Benefits

• Medical, dental and vision insurance
• 401(k)
• Paid leave
• Tuition reimbursement
• A variety of other discounts and perks
• Fully Remote