Principal Governance, Risk & Compliance Engineer - Activision

Job Title:

Principal Governance, Risk & Compliance Engineer - Activision

Requisition ID:

R025113

Job Description:

Your Platform

Founded in 1979, Activision has continuously disrupted the world of entertainment as a leader in the videogame industry. With a history of delivering iconic game changers -- like Pitfall®, Tony Hawk®, Guitar Hero®, Crash Bandicoot™, Skylanders™ and Call of Duty® -- our obsession is delighting our players around the globe. Focused and committed to innovation, we consistently deliver the most beloved, engaging and successful entertainment.

And while we have world-class franchises, infrastructure and resources, our success comes from a passionate, talented and diverse team of people producing greatness together. So, if you’re interested in our biggest priority, it’s our people.

We’re currently driving the next era for our company and community by creating amazing experiences for fans and continuing to make Activision an inclusive place where everyone can thrive.

Join us, make history.  To learn more, check us out at www.activision.com, www.activisiongamesblog.com or @Activision on Instagram, Twitter, Facebook and LinkedIn.

Your Mission

This position is a principal-level role focused on GRC, requiring a blend of technical expertise and GRC knowledge to identify, assess, and mitigate risks while ensuring compliance with information security standards.

The candidate will have a background within information security Governance, Risk and Compliance (GRC) to make an impact on the company’s security program and services. The candidate will have experience with various Information Security concepts, primarily including risk management, compliance, governance and metrics, audit, policy and standards development, and control assessment. This individual will work with the Information Security team, Legal, IT, and other business teams to:

• Play a critical role in the development, implementation and maintenance of a robust and scalable GRC program.
• Provide expert guidance and leadership on GRC matters to senior leadership and business stakeholders.
• Ensure that policies and procedures are communicated effectively and implemented consistently across the organization.
• Develop and implement compliance monitoring and reporting mechanisms.
• Conduct compliance audits and assessments to identify gaps and implement corrective actions.
• Manage issues resulting from risks, audits, compliance gaps.
• Manage security exceptions and engage with the business to understand control environments and mitigation strategies.
• Manage and maintain risk and audit program controls. Preparing team members and related materials required for effective risk assessment activities (e.g., control design walk-throughs), follow-up requests, and testing.
• Provide executive level reporting and metrics on the current state and recommendations for risk reduction throughout the business.
• Work with the various businesses and leaders to identify and improve existing control processes.

• Evaluate the level of risk involved in key processes and controls and triage accordingly.
• Participate in administration of GRC tools.

Player Profile

Minimum Requirements:

• Bachelor’s degree; or equivalent work experience
• Have a deep expertise in governance, risk management, and compliance as it relates to Information Security, including understanding of security requirements, frameworks, templates, assessments, process maps, data flows, control assessment and leadership reporting
• Ten+ years of direct experience in information security governance, risk management, and/or compliance
• Excellent oral/written communication, problem solving and analytical skills
• Ability to work independently and as part of a team to achieve desired objectives and project results
• Ability to interface effectively and decisively with all levels of management, departments, business units across global time zones and outside vendors
• Project and Program Management Skills
• A desire to participate in creating the workplace you want to be a part of.
• We work hard and work responsibly. Personal accountability goes a long way. We believe we are the change.

Our World

Activision Blizzard, Inc., is one of the world's largest and most successful interactive entertainment companies and is at the intersection of media, technology and entertainment. We are home to some of the most beloved entertainment franchises including Call of Duty®, World of Warcraft®, Overwatch®, Diablo®, Candy Crush™ and Bubble Witch™. Our combined entertainment network delights hund