Analyst, Risk Analytics - Cybersecurity Metrics & Insights

Every great story has a new beginning, and yours starts here.

Welcome to Warner Bros. Discovery… the stuff dreams are made of.

Who We Are…

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

Your New Role...

In an effort to become even more risk and data-driven, the Warner Bros. Discovery Security Metrics & Insights team is looking to expand use of Key Performance Indicators and Key Risk Indicators for use with security leaders, senior leaders at WBD, and with the Board of Directors. These metrics will be used to measure and monitor trends in cyber risk, and present insights, recommendations, and opportunities to reduce cyber risk across the company. This role will be responsible for data wrangling, analysis, and application of machine learning and artificial intelligence to security data sets. 

Specific responsibilities will include:

• Consolidating WBD data into a single set of meaningful metrics
• Maturing existing risk-based metrics, including Key Risk Indicators
• Continuing to expand the key risk indicator dashboard to produce business unit views (HBO Max, CNN, etc) for use by the Business Information Security Officers
• Further automating Key Risk Indicator dashboard to allow for more time spent on insights (versus data wrangling)
• Evaluating quality of data sets, identifying efforts that can be made to improve quality, and executing on those efforts
• Identifying opportunities to collect additional and better security data, and executing on those efforts
• Developing innovative and interactive security data visualizations that can be understand be leadership and non-security audiences
• Identifying opportunities to leverage machine learning or artificial intelligence on the massive data sets we have at our disposal 
• Identifying opportunities to quantify risk in terms of dollar ranges
• Leveraging security datasets for ML/AI opportunities
• Developing additional expertise in WBD security data and tools

CYBERSECURITY ANALTICS & REPORTING 

• Wrangling data to produce key risk indicators by business unit so that WBD can have organizational views of cyber risk and better identify opportunities to reduce risk
• Automating data pulls using tools such as Jupyter Labs, Python, R, SQL, and others in order for the team to spend more time on insights.
• Evaluating quality of data sets, identifying efforts that can be made to improve quality, and executing on those efforts to improve our accuracy and precision around cyber risk.
• Produce various data visualizations through the use of Tableau or Power BI to tell the story of security to leadership and non-security audiences.
• Identifying opportunities to leverage machine learning or artificial intelligence data sets to make better recommendations on how risk can be reduced or to predict areas where risk may increase.

The Essentials

• 3+ Years of Experience with analytics - descriptive, predictive, and prescriptive.
• 3+ Years Experience with Python, Jupyter Labs, Powershell, SQL, Tableau, or PowerBI.
• Experience with Splunk, ServiceNow or Vulnerability Management Tools.
• Experience with a risk-based data centric approach using risk frameworks such as NIST-CSF.
• Critical thinking skills with an inquisitive and questioning nature Ability to think big picture; a "systems thinker.”
• Build and nurture relationships, gain consensus for ideas and plans, and have excellent communication skills to present solutions that will facilitate data-driven solutions.
• Ability to work successfully in a cross matrixed IT and business team environment.
• Ability to formulate detailed technical documentation, remediation requirements.

The Nice to Haves

• Self-motivated, with experience operating with remote, global teams.
• Strong interpersonal and influencing skills of people at different levels and with different backgrounds and experiences.
• Good understanding of secure software development best practices, network, and other technical security controls.
• Strong collaboration and experience working in matrixed environments.

How We Get Things Done…