VP, Governance, Risk, and Compliance

Summary

Join NBCUniversal as the Vice President, Governance, Risk, and Compliance (GRC), a key senior leadership role within the new Versant Cyber organization. This role involves leveraging technical expertise and business acumen to build and expand core capabilities while modernizing the team's approach to risk. Reporting to the Chief Information Security Officer, you will set the strategic direction of the organization's security evaluation program, control frameworks, and risk management processes. Key areas of focus include managing the governance program, risk management lifecycle, compliance and policy management, corporate audit liaison, and cybersecurity assurance. The position is fully remote and offers competitive compensation and benefits. This is an exciting opportunity to be part of a new company as it takes shape.

Requirements

• 10+ years working in a leadership position across cyber security disciplines to include but not limited to Cyber-focused security assurance, governance, risk, compliance, audit, and business facing assessment/risk/resolution lifecycle management
• Hands on experience leading external audits and regulatory reviews involving multiple, complex business workflows
• Prior experience creating and maintaining governance policies, compliance programs, security training, and board reporting formats
• Prior experience developing internal testing and control frameworks to ensure operational efficiency and compliance
• M&A experience driving security evaluations and providing comprehensive risk evaluations
• Prior experience leading functions and staff defending large, complex global computing enterprises and understanding strategic and tactical requirements to transform and maintain key security functions
• Expert knowledge of risk frameworks (e.g., COSO, ISO 31000), industry-specific regulations (e.g., SOX, HIPAA, GDPR, CCPA), risk assessment, and mitigation strategies
• Knowledge of the cyber threat landscape including different types of adversaries, campaigns, and the motivations that drive them and the ability to translate this to defending Versant
• Strong and proven communication (both verbal and written) and customer engagement skills with experience briefing corporate executives and professionals
• Strong leadership skills, social and business acumen, and proven results working with leaders across organizational and business lines to solve complex problems
• Experience providing direct support and input to business executives and taking a lead role in driving the strategic direction of the organization’s mission
• Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence

Responsibilities

• Setting the strategic direction of the GRC organization with alignment across key Cyber partner organizations and the overall Cyber strategy
• Transforming the maturity of existing functions including ownership of the risk management lifecycle and operational processes
• Directing cross business engagement, interactions, intake of security requests and prioritization across GRC services
• Directing multiple outsourced services and staff to support operational efficiencies
• Evaluating security risk of technology implementations across all brands and business units and establishing appropriate accountability within business leadership for accepted risk
• Crossing business lines, forging key stakeholder relationships, and driving an inclusive cyber defense mission applicable to Versant and its business areas
• Promoting, fostering, and advocating an environment of collaboration, diversity, and inclusion
• Maintaining an effective feedback loop with business partners – seeking and integrating business area feedback into daily operations and strategic growth
• Influencing the Versant Cyber Organization, executing its strategic and tactical mission, and being a leader of its transformation, maturity, and sustainability
• Managing, developing, and supporting staff across a wide range of experience levels and maintaining a high bar for effectiveness and inclusion on the team

Preferred Qualifications

• Previous experience working in multiple large complex environments and specifically within the Governance, Risk, and Compliance functions
• Previous experience leading Governance, Risk, and Compliance functions in the media, entertainment, and/or advanced technology industries
• Previous experience building, maintaining, or transforming a risk management program
• Bachelor’s Degree in an IT related field and/or equivalent work experience
• Master’s Degree in an IT related field

Benefits

• This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks
• Salary range:$210,000 - $255,000 (bonus and long-term incentive eligible)