GRC Associate Analyst

The Associate GRC Risk Analyst is responsible for conducting security risk assessments to help identify and articulate risk and risk treatment options in support of NBCUniversal Business Groups.Conduct risk assessments to identify, assess, measure and monitor information security risks to NBCU processes, assets, vendors, products and services. Generate risk assessment reports to support management action, escalation, and risk acceptance processes resulting from risk assessments.Liaise with business area information security officers and security contacts, application owners, control owners, and SMEs such as Information Security, Internal Audit and specialized risk management teamsFacilitate development, prioritization and rationalization of risk mitigation including audit action plans Support monitoring of remediation efforts to completion Gather, analyze, and report status and metrics on risks, controls and issues including coverage metrics, KRIs and KPIsHelp mature NBCU risk and control framework