Senior Information Security Risk Analyst (3rd Party Vendor Risk)

Who We Are… Behind WBD’s vast portfolio of iconic content and beloved brands are the storytellers, creators, and dreamers who bring our characters to life and shape what’s next. From brilliant creatives to technology trailblazers, WBD offers career-defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best self. Here you are supported, here you are celebrated, here you can thrive.

Must work a hybrid schedule (3 days onsite) out of our Atlanta office.

About the Role

The Senior Information Security Risk Analyst will support the assessment of information security risks across all of Warner Bros. Discovery’s (WBD’s) third-party suppliers/vendors. This role requires the ability to understand and assess information security risks posed by third parties and clearly communicate those risks to the business. It will apply global IT industry best practices to ensure WBD uses third-party information security risk management to foster business-enabling insights.

Responsibilities

• Use WBD processes and tools to perform 3rd-party vendor risk assessments for new and existing vendors.
• Work with the business to understand the “what” and “how” of services provided by vendors to assess the level of risk and scope of assessment.
• Perform timely assessments of vendor controls to identify, document, and communicate key deficiencies to the business and Information Security management.
• Report on assessment outcomes, risk level, and associated recommendations to remediate issues.
• Perform 2nd-level peer reviews of assessment outputs prior to reports being finalized to drive consistency and completeness of findings based on the risk of engagement.
• Assist with follow-up on documentation requests for initial and periodic assessments.
• Monitor corrective action plans against agreed-upon timelines.
• Review remediation evidence for closure of findings.
• Review contracts to ensure appropriate data security terms are included.
• Provide comments and acceptable alternatives to vendor contract revisions in alignment with defined guidance.
• Escalate provision changes as needed.
• Assist with contract intake to ensure the pipeline of assessments is managed in a timely and efficient manner.
• Provide periodic status updates.
• Maintain accurate and complete data within the identified system of record.
• Contribute to the team’s continuous improvement efforts by identifying opportunities and helping to implement them.

Requirements

• BS/BA degree required.
• 3-5 years’ experience in information security, with at least one (1) year of experience in third-party risk management.
• Knowledge of IP network infrastructure (firewalls, intrusion detection/prevention), access control, data encryption, and physical security; cloud security knowledge a plus.
• Excellent communication skills, including the ability to communicate effectively in English, both written and verbal.
• Ability to present complex topics in clear, non-technical language.
• Ability to work collaboratively within a team and across business and technology functions.
• Detail-oriented individual with critical thinking, analytical, and problem-solving skills.
• Demonstrated ability to be proactive and take ownership of and solve problems.
• Active learner—able to enhance personal, professional, and business growth through new knowledge and experiences.
• Ability to handle multiple assignments concurrently within an iterative environment.

Preferred Qualifications

• One or more of the following certifications: CISSP, CRISC, CISA.
• 2+ years of prior experience in a related field (media, entertainment, business development, or streaming services industry experience a plus).
• Familiarity with streaming and similar products/services.
• Experience working in a national or global company.

Culture

Our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with insights from the team on what they mean and how they show up in their day-to-day.