Sr. Information Security Compliance Analyst

Storytelling is, and will always be, the heart of what we do at Skydance.

Our vision is to build a thriving entertainment ecosystem where stories and worlds are imagined, brought to life and experienced. We create for every age and audience, anchored by the strength of our content and experiences and the depth of our connection with fans. We are creator-first, audience-focused, tech-forward, globally scaled.

Here, you’ll work with talented teams that move fast, think boldly and collaborate with purpose to deliver results. We aim high, champion the best ideas and win together, earning the trust of our employees, creators, partners and audiences every day.

If you’re energized by the opportunity to help build the next-generation global media and entertainment company powered by creativity and technology, we’d be thrilled to welcome you aboard. LET’S GO!

ㅤ

*Must work a hybrid schedule (3 days onsite) out of our Atlanta office.*

The Job

Warner Bros. Discovery is looking for a skilled Sr. Information Security ComplianceAnalyst who will join the Global Information and Content Security (GICS) team to support the organization globally across all US and international brands and divisions. As part of the GICS team, you will lead and support PCI auditsglobally and will collaborate with key business units and stakeholders to ensure security and compliance with Payment Card Industry (PCI) requirements and other cybersecurity regulatory and policy requirements. The ideal candidate will have experience as a PCI Qualified Security Assessor (QSA) with experience across multiple compliance domains in audit process/procedure, risk analysis and mitigation, control testing, and continuous improvement initiatives.The candidate will have experience completing PCI4.0assessmenttypes including but not limited to SAQ-A, ROC, SAQ-D, SAQ B-IP, and SAQ P2PE, as well as experience remediating vulnerabilities related to PCI ASV scanningprocesses.We support critical brands such as DC Universe, Harry Potter, Warner Bros Studio Hollywood Tours, Adult Swim, Cartoon Network, Discovery+, Max, TNT Sports,Golf Digest,Food Network, NCAA, etc.The WBD PCI programis inclusive of different types of environments collecting payments such as ecommercesystemsincluding retail, ticketing, DTC Subscriptions, PPV Sports, donations & partner payments,mobile in app purchases, andvendor invoicing,and physical locations such ascall centers, museums, retail physical stores, physical tours, pop up shops, and virtual reality experiences.

We cultivate a security culture across all teams and disciplines, providing policy, standards, guidance, and awareness training to everyone. We work closely with departments across the company to understand their workflows and help ensure they are following the best security practices. We partner with technology stakeholders to assess our posture, build controls, and mitigate security risks.

This team concentrates on validatingthat critical processes and controls are functioning end-to-end, identifyingrisk areas and control mitigation, as well as participatingin projects to understand and determinepotential impact to regulatory compliance components. You will identifyareas of improvement and non-compliance which may lead to process changes and/or new controls. The Information Security Compliance Senior Analystwill drive various initiatives to completion and assistin managing and developing an effective Compliance Program. You will be accountable for a variety of functions centered on effective implementation of all the elements of a compliance program (project): compliance with applicable laws, rules, and regulations, internal policies, and procedures, andaccepted business practices.

Responsibilities:

Cybersecurity Compliance and Assessments

• Lead and support PCI assessments.

• Communicate status of securitycomplianceefforts to executive leadership and management across technology disciplines.

• Keep current with the latest security technology advances and evolving compliance requirements and propose innovations that may benefitthe business.

• Maintain detailed project plans and tasks lists to ensure you meet major milestoneand critical due dates.

• Assistin information security assessments, audits, risk mitigation, and remediation.

• Track status ofimplementing remediation plans for control deficiencies, regulatory and policygaps and make recommendations for process efficiencies.

• Drive process improvements and control implementation across business functions, including resolution of assessment findings and independent initiatives.

• Effectively communicate and build rapport with various partners and teams globally.

• Leadtargeted compliance assessments, audits,and reviews, communicating results and recommendations in clear and concise written reports; and collaborate with management to ensure corrective actions are implemented effectively.

• Validate system requirements, flows, and written procedures through testing and observations, and to ensure regulatory compliance operating procedures and controls are working as intended.

• Participate in cross-functional teams to support various regulatory compliance subject matters ensuring that user activities continue to support systematic processes in place and drive positive compliant behaviors or that proposed new system changes fully meet Regulatory, Security and Legal requirements.

• Perform analysis based on the testing results through observations and reports to identifysystem and process gaps reducing risk for WBD.

• Document all work, and findings resulting from testing and communicate to relevant stakeholders within defined standard processes.

• Conduct related ongoing security compliance monitoring activities in coordination with the organization’s other compliance and operational assessment functions.

• Lead compliance assessments including testing to demonstratethe effectiveness of controls, and supporting team members to ensure reviews are critical, comprehensive, and thorough.

Collaboration

• Accountable fororganizing andleading meetings with various stakeholders across the company, and across the globe.

• Technical and process experienced professionalwho will ensure data and evidence meet audit expectations and regulatory requirements.

• Responsible for establishingand tracking goals, project plans, and assessment status, and is able toeffectively communicate risks and overall status to your management on a timelybasis.

• Stay abreast of existing and upcoming projects to effectively plan your work.

• Make updates to the centralized issues log, audit calendar, and other key team documents, ensuring accuracy, attention to detail, and overall status.

• Assistin the implementation of the Company GRC system, policies, standards, and processes.

• Assistin creation ofcomprehensive and meaningful metrics and status updatefor your manager.

• Ability topartner with other team members, contribute to building a positive team culture, learn internal processes, andcontribute to buildingeffective deliverables.

Reporting

• Identifyand measure key metrics reflecting the status of audits and assessments.

• Monitor the effectiveness of the compliance assessment process in accordance withagreed team metrics and performance measures to drive continuous improvements.

• Actively participatein stakeholder meetings with the goal of understanding all major projects and initiatives planned.

• Actively drive and report on status of audit completion, as well as remediation of regulatory and policy issues.

The Essentials:

• Bachelor’s degree in computer science, business administration or related technical field.

• 4+or more years working in audit or compliance environments in a corporate or consulting capacity, with experience in a highly technical setting.

• 3+ years working in PCI regulatory assessments / requirements; previousPCI Qualified Security Assessor “QSA” certification required.

• The ability to be precise and display superb attention to detail is essential.

• Ability to effectively apply training and feedback.

• Experiencetesting cloud controls across AWS, Azure,and GCP.

• Experience defining certification/action plan roadmaps balancing compliancedeliverables, business requirements, and resource allocation.

• Relevant certification (CISA, PCIP, CISM, CISSP, etc.).

• Experience with cross-functional risk, complianceand/or information security disciplines.

• Subject matter expertisein the areas of PCI, Data Privacy, SSAE 18, Swift, SOX, etc.

• Superior analytical and problem-solving skills.

• Superb relationship building skills.

• Ability to effectively prioritize and execute tasks in a high-pressure environment.

• Ability to assess customer/client needs, creatively approach solutions, decide and influence appropriate coursesof action.

• Ability to work with changing priorities and with multiple projects.

• You possessthe highest integrity commensuratewith a compliance & ethics position.

• You have excellent communication and project management skills.

• You produce clear & polished work product, in narrative and visual form.

• You can work independently, are flexible and adaptive, and demonstratea passion to operatein a dynamic and fast-growing environment.

• Strong quantitative, qualitative, and analytical skills with ability to use sound business judgment and to exercise skepticism as needed.

The Nice to Haves:

• 3+ years of Big 4experience in a related field.

• 3+ years of prior experience in a related field (media, tech, entertainment, business development or streaming services industry experience).

• Knowledge of and passion for media, entertainment, and technology industries (including key players, growth trends and drivers, new media models, industry structure, etc.).

• Familiarity with streaming and similar products/services.

• Experience working in a national or global company.

• Some visualization tool knowledge would be helpful (i.e.,Tableau, Power BI).

• Comfortable in working in a highlyiterative environment.

• Creative problem solver who possessessound business discernment and is highly detail oriented.

• A passion for accuracy and translating insights into a compelling narrative; able to maintaina balance between the details and the larger picture.

About Skydance

Skydance is a next-generation global media and entertainment company, comprised of three business segments: Studios, Direct-to-Consumer, and TV Media. Skydance's portfolio unites legendary brands, including Paramount, Warner Bros., HBO and HBO Max, Paramount+, Pluto TV, CBS, CNN, CBS Sports, TNT Sports, Nickelodeon, Cartoon Network, MTV, Food Network, BET, HGTV, and Comedy Central.

Some Important Details

We embrace the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit. In line with the laws of the country or region in which the role is based, this includes consideration without regard to race, color, ethnicity, national origin, citizenship status, religion or belief, sex, gender, gender identity or expression, sexual orientation, age, marital status, pregnancy, parenthood, physical or mental disability, genetic information, military or protected veteran status, union status or any other category protected by applicable law.

If you’re a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.

Hiring Salary Range: $89,390.00 - $166,010.00 per year In compliance with local law, we are disclosing compensation, or a range thereof, for roles where legally required. Actual salaries will vary based on a variety of job-related factors, including but not limited to geographic location, external market data, internal equity, skill set, experience, training, education, and/or performance. Base pay is just one component of our total compensation package. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Warner Bros. Discovery provides a variety of benefits to employees, including health insurance coverage, an employee wellness program, life and disability insurance, a retirement savings plan, paid holidays and sick time and vacation.