Security Admin II - Sports Next

NBCUniversal; Orlando (FL); Remote; USD 85,000 - 115,000; Full time

Job summary

NBCUniversal seeks a Security Administrator II to oversee security governance for NBCSports Next. This fully remote role requires expertise in compliance and security standards, managing on-premises and cloud infrastructures. Ideal candidates will have solid IT backgrounds and experience in developing security solutions.

Qualifications

• 4+ years’ experience in a Corporate IT environment.
• Working knowledge of IT security frameworks such as PCI DSS, NIST 800-53.
• Expertise in Windows/Linux Operating Systems.

Responsibilities

• Maintain organizational security procedures and develop processes for compliance.
• Lead and manage PCI-DSS compliance program.
• Configure and manage IT infrastructure and respond to service interruptions.

Skills

Security compliance and governance

Communication

Automation solutions development

Vulnerability testing

IT infrastructure management

Education

Relevant IT certifications (PCI DSS, NIST 800-53, ISO 27001)

Job description

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

Job Description

The Security Administrator II role will be responsible for maintaining and managing NBCSports Next Operational system security and platform governance. This includes system and software security hardening, maintaining organizational security procedures, and developing processes to meet organizational compliance and governance objectives. This position will require 24/7 support availability.

This role will be responsible for ensuring business compliance and governance initiatives are being met across NBCSports Next. They will serve as the key resource for software platforms to meet or exceed industry standard compliance and privacy requirements. They will be responsible for leading and managing the PCI-DSS compliance program, as well as managing any privacy programs such as GDPR or CCPA.

This role will be responsible for ensuring our on-premises and cloud-based infrastructure is patched, up to date, and meets the regulatory objectives as outlined by PCI-DSS and NBCUniversal.

Finally, a successful candidate must be able to effectively communicate the importance of the key programs and services within the NBCSports Next and NBCUniversal organization to obtain the necessary support, trust, and buy-in from the business. This role will also require presenting findings, technical reports, and other key information to executive stakeholders.

Job Duties

• Contribute to developing and executing a comprehensive PCI DSS technical assessment program by reviewing, evaluating, and testing security policies.
• Develop effective communication and collaboration with internal and external teams to facilitate discussion, identified by preparing final reports based on audit tests.
• Configure and manage a range of IT infrastructure including: (servers, switches, SIEM, storage arrays, and cloud-hosted infrastructure).
• Monitor and manage daily tickets for employee access, onboarding, and offboarding.
• Maintain an active role in the organization's patching schedule and process.
• Responding to service interruptions as they occur.
• Test and evaluate systems for vulnerabilities via both manual and automated solutions
• Perform performance tuning, hardware upgrades, and resource optimization as required.
• Develop automation solutions that help drive compliance and security.

Qualifications

• 4+ years’ experience in a Corporate IT environment
• Working knowledge of common IT security frameworks such as: PCI DSS, NIST 800-53, ISO 27001, HITRUST
• Subject Matter Expertise in the following areas:
  • Windows/Linux Operating Systems
  • Network Devices and protocols, including data flow diagrams
  • Knowledge of the following industry standards: OWASP Top 10, SAN 25, and CWE
  • Self-Driven desire to think creatively and produce results
  • Knowledge of security defense tools such as: WAF, IDS/IPS, SIEM, and AntiVirus
  • Ability to articulate security-related principles into business terms.
  • Ability to interact with common version control management systems such as GitHub.

Desired Skills

• Understanding of various data and privacy regulations, ie PCI DSS, SOX, HIPAA, GDPR, CCPA
• Understanding of common cloud service environments such as AWS, GCP, or Azure
• Experience designing security network architectures using both hardware and software controls and the ability to secure those tools
• Experience using diagramming tools such as Lucidchart or Visio
• Knowledge of deploying security solutions such as: SEIM, Patching, Vulnerability Scanning, File Integrity monitoring.
• Certification in any area ofPCI DSS, NIST 800-53, ISO 27001, HITRUST

Fully Remote: This position has been designated as fully remote, meaning that the position is expected to be performed from a non-NBCUniversal worksite, most commonly an employee’s residence.

Additional Information

As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.

If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. You can submit your request to [e-mail].

Although you'll be hired as an NBCU employee, your employment and the responsibilities associated with this job likely will transition to Versant in the future. By joining at this pivotal time, you'll be a part of this exciting company as it takes shape.