Lead IT GRC Analyst; Policy Management

• Business Segment:
  Operations & Technology
• Compensation: USD 110,000 - USD 140,000 - yearly

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service.

We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, Dream Works Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood.

NBCUniversal is a subsidiary of Comcast Corporation. Visit  for more information.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

The Lead IT GRC Analyst will lead the operational execution, integration, and continuous improvement of the Cyber Governance & Controls function. This role will support turning a broad portfolio of governance work including policies, standards, configuration baselines, Cybersecurity Risk Acceptance Memoranda, long-term governance models, control libraries, and governance advisory engagements into a coordinated, measurable enterprise service.

The successful candidate will serve as the operational leader connecting Governance strategy to day-to-day execution. The role will partner across Cybersecurity, Operations & Technology, Legal, Privacy, Audit, Procurement, and various business stakeholders to establish clear ownership, decision rights, evidence, review cadences, exception paths, and sustainable control outcomes.

This role enables delivery across eight connected service lines: policy and standards lifecycle management; security baselines and control governance; vendor security management; continuous third-party monitoring; GRC tooling and workflow automation; data protection governance; program governance advisory; and regulatory, audit, and standards interpretation. The position is differentiated from traditional project management by its accountability for the operating health, maturity, adoption, traceability, and effectiveness of Governance itself.

Responsibilities

Governance Operations

• Develop, implement, and continuously improve Governance operating procedures, playbooks, lifecycle schedules, decision records, and recurring operating rhythms.
• Coordinate policy forums, standards review, governance working sessions, steering decisions, escalations, action-item closure, and quarterly operating reviews.
• Serve as coordinator for the Global Cybersecurity Governance Steering Committee, including agenda planning, materials, stakeholder alignment, decision tracking, action-item follow-through, and governance reporting.
• Chair the Global Cybersecurity Governance Working Group, facilitating cross-functional discussion, driving alignment on governance priorities, escalating decisions as needed, and ensuring actions are assigned, documented, and completed.
• Define…