Engagement Principal (Director – Audit and Technical Advisor Lead)

Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.

Job Summary

Engagement Principal, Technology– Comcast Global Audit

Primary Responsibilities:
The Engagement Principal will partner with audit leads through planning, execution, and reporting by providing advanced technical expertise and analysis across multiple audits. With our standard engagement cadence and focus on diversifying our talent, Engagement Principal will gain broad exposure to our businesses and technologies. This Engagement Principal will work collaboratively with audit leaders and oversee technical advisors to provide detailed technical guidance across a diverse range of Comcast environments.

Job Description

Core Abilities:

What You Deliver

• Provides technical expertise and oversight across multiple audits and all aspects of the Internal Audit process including assessing risk, evaluating technical controls/operations, and evaluate issues related to the following but not limited to:

  • Cloud environments (i.e., AWS, AZURE)

  • Network (LAN and WLAN) Access Control and Authentication implementation design and configuration (i.e., Cisco ISE, RSA)

  • SIEM deployment and performance monitoring (i.e., Arcsight, Splunk)

  • Firewalls/VPNs/Proxies (i.e., Cisco, Palo Alto, Juniper, Bluecoat)

  • Linux Operating System security (i.e., RedHat/CentOS, Ubuntu, SuSE)

  • Windows Operating System security (i.e., Windows Server 2003/2008/2008R2/2012/2016 and Windows XP/Vista/7/8/10)

• Provides leadership, direction, and ongoing feedback for the technical advisors and engagement team to ensures that fieldwork is properly conducted and completed in accordance with the audit plan, staff is supervised, work is reviewed, and follow-up work is performed, as necessary; findings are communicated to internal audit and business management.

• Performs thorough inquiry and data analysis to understand complex security and technology operations and manages the planning efforts for the engagement timeframe and scope.

• Ensures the team applies appropriate audit procedures to the areas reviewed to ensure that controls are tested, and all significant risks are addressed.

• Contributes to the operation and management of the department in areas such as recruiting, staffing, scheduling, budgeting, organization performance metrics, presentations to management, and training.

• Leads inquiry and data analysis to understand security and technology operations, assess risk, and partners with engagement leads in developing project scope for complex process areas.

• Conducts and leads training sessions to educate broader team on key technical aspects.

• Provides expertise to less technical engagement teams, technical advisors and helps with understanding and executing upon technical concepts and standards.

• Takes on ad-hoc projects to improve (e.g., automate) technology audit testing.

• Contributes to overall planning efforts for multiple engagements regarding technical testing timeline and approach.

• Identifies opportunities for improvement to audit methodology, tools, and training.

• Consistent exercise of independent judgment and discretion in matters of significance.

• Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) as necessary.

• Supports department objectives and performs other duties and responsibilities, as assigned.

How You Deliver

• Demonstrates the ability to quickly relate complex business processes, applications, data, and organizations to identify and resolve business issues.

• Stays current on relevant business risks (e.g., current events, audit trends, emerging technologies, cyber security, etc.) and determines where appropriate to apply to engagements.

• Performs effectively as a project leader across