Analyst, Security Policy and Risk

Job Description

The Job
This role will be responsible for the development, implementation, maintenance and execution of cybersecurity policy and procedural documentation (including policies, standards, processes, procedures, and work instructions). This role will develop and manage the policy framework, and be responsible for Information Security documents throughout their lifecycle. This person will also coordinate with multiple business areas including Internal Audit, Finance, Legal, IT, etc. to ensure Information Security requirements are embedded in the governing documents those functions create to support the business.

Policy
• Write policy and procedural documents that are clear, concise and accurate. Analyze, research, develop, compose, and/or edit compliance policy and procedure documents according to WBDs standards.
• Responsible for managing the development of security policies in conformance with industry best-practices, WBD's legal requirements, industry and corporate standards.
• Drives integration of information security policies and standards to align and integrate within WBD's global business operations.
Operational Support

Responsible for partnering with the risk management team to manage information security policy exceptions and risk acceptance requests.

Partners with Technology Security Insights and Metrics team to drive applicable policy metrics.

Partner with the IT Security Operations, Exceptions, and Information Security Training & Awareness teams to create content and strategy for training and awareness initiatives.

Partner with Legal to promote data classification, retention schedules and guidelines.

Partner with organization stakeholders and Information Security leads to ensure compliance on IT security policy / standards implementation.

Work with Compliance partner organizations to ensure policies and standards comply with appropriate industry standards and regulations.

Acts as a key advisor to the line of business regarding Information Security policies and compliance with the established policies.

The Essentials
• BS/BA degree or 6+ years experience
• 3+ years of prior experience in a related field (media, entertainment, business development or streaming services industry experience a plus)
• Possess a working level knowledge of Information Security program concepts, practices, and standards, as well as practical experience in the design and implementation of business processes.
• Knowledge of and experience in developing and implementing information security policies and processes, preferably with global experience.
• Exceptional communication and advocacy skills, both verbal and written, with the ability to express complex and technical issues and communicate effectively and tactfully to all levels of personnel.
• Excellent analytical and problem solving skills.
• Ability to handle multiple tasks, prioritize and meet deadlines.
• Ability to formulate detailed technical documentation, remediation requirements.
• Expert user of Microsoft Office (Excel, PowerPoint, Word) to prepare all documents, presentations, graphs, briefings, and worksheets
• A passion for accuracy and translating insights into a compelling narrative; able to maintain a balance between the details and the larger picture
• Excellent written and verbal communication
• Work collaboratively w/small teams
• Ability to handle multiple assignments concurrently

The Nice to Haves
• MBA
• 1+ years of post-MBA experience in a related field (entertainment or entertainment)
• Knowledge of and passion for media, entertainment, and technology industries (including key players, growth trends and drivers, new media models, industry structure, etc.)
• Familiarity with streaming and similar products/services
• Experience working in a national or global company
• Some visualization tool knowledge would be helpful (i.e. Tableau, Power BI)
• Comfortable in working in highly iterative and somewhat unstructured environment

How We Get Things Done…

This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with some insights from the team on what they mean and how they show up in their day to day. We hope they resonate with you and look forward to discussing them during your interview.

The Legal Bits…

Warner Bros. Discovery embraces the opportunity to build a workforce that reflects the diversity of our society and the world around us. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, regardless of sex, gender identity, ethnicity, union status, age, sexual orientation, religion or belief, marital status, pregnancy, parenthood, disability or any other category protected by law.

If you're a qualified candidate with a disability and you need a reasonable accommodation in order to apply for this position, please contact us at recruitadmin@wbd.com.

Jobcode: Reference SBJ-rj1441-3-145-60-149-42 in your application.