Security Admin II - Sports Next

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

Job Description

The Security Administrator II role will be responsible for maintaining and managing NBCSports Next Operational system security and platform governance. This includes system and software security hardening, maintaining organizational security procedures, and developing processes to meet organizational compliance and governance objectives. This position will require 24/7 support availability.

This role will be responsible for ensuring business compliance and governance initiatives are being met across NBCSports Next. They will serve as the key resource for software platforms to meet or exceed industry standard compliance and privacy requirements. They will be responsible for leading and managing the PCI-DSS compliance program, as well as managing any privacy programs such as GDPR or CCPA.

This role will be responsible for ensuring our on-premises and cloud-based infrastructure is patched, up to date, and meets the regulatory objectives as outlined by PCI-DSS and NBCUniversal.

Finally, a successful candidate must be able to effectively communicate the importance of the key programs and services within the NBCSports Next and NBCUniversal organization to obtain the necessary support, trust, and buy-in from the business. This role will also require presenting findings, technical reports, and other key information to executive stakeholders.

Job Duties

• Contribute to developing and executing a comprehensive PCI DSS technical assessment program by reviewing, evaluating, and testing security policies.
• Develop effective communication and collaboration with internal and external teams to facilitate discussion, identified by preparing final reports based on audit tests.  
• Configure and manage a range of IT infrastructure including: (servers, switches, SIEM, storage arrays, and cloud-hosted infrastructure).
• Monitor and manage daily tickets for employee access, onboarding, and offboarding.
• Maintain an active role in the organization's patching schedule and process.
• Responding to service interruptions as they occur.
• Test and evaluate systems for vulnerabilities via both manual and automated solutions
• Perform performance tuning, hardware upgrades, and resource optimization as required.
• Develop automation solutions that help drive compliance and security.

Qualifications

• 4+ years’ experience in a Corporate IT environment
• Working knowledge of common IT security frameworks such as: PCI DSS, NIST 800-53, ISO 27001, HITRUST
• Subject Matter Expertise in the following areas:
  • Windows/Linux Operating Systems
  • Network Devices and protocols, including data flow diagrams
  • Knowledge of the following industry standards: OWASP Top 10, SAN 25, and CWE
  • Self-Driven desire to think creatively and produce results
  • Knowledge of security defense tools such as: WAF, IDS/IPS, SIEM, and AntiVirus
  • Ability to articulate security-related principles into business terms.
  • Ability to interact with common version control management systems such as GitHub.

Desired Skills

• Understanding of various data