Sr. Information Security Compliance Analyst

*Must be able to work a hybrid model (3 days onsite) out of our Atlanta office.*

The Job
Warner Bros. Discovery is hiring a talented Senior Information Security Compliance Analyst to support the Cyber Security Compliance program globally across the organization. As a member of the Security Compliance team, you will be a member of the broader Cyber Security team and will work in partnership with the team as well as key stakeholders across various tasks related to multiple applications and business processes including improving business processes and aligning key metrics. You will partner with stakeholders such as Engineering, Technology, Governance, Risk, Privacy, Financial Compliance, Internal Audit, External Audit, Security Engineering, Legal, Technology, IDAM, HR, and other key partners to ensure compliance with various regulatory and policy requirements. The successful candidate will have experience across multiple compliance domains with experience in security, cyber security, audit process/procedure, risk analysis and mitigation, control testing, and continuous improvement initiatives.

You will be responsible for driving areas encompassing both regulatory and non-regulatory compliance such as PCI, Privacy Data Security, Swift, SSAE 18, control implementation and validation, issue tracking and remediation, advisory projects, security assessments, and custom compliance control design assessments. This team focuses on validating that processes are working end-to-end, identifying risk areas and risk treatment/mitigation, as well as participating in projects to understand and determine potential impact to security and regulatory compliance components as well as overall compliance to Security Policies & Standards. You will identify areas of improvement and non-compliance which may result in process changes and/or coaching requests. The Senior Information Security Compliance Analyst will perform control validation and reporting across our critical compliance programs as well as information security assessment/analysis, mitigation, and remediation. You will drive various other initiatives to completion and assist in managing and growing an effective Compliance Program. In addition, you will be responsible for a variety of functions centered on effective implementation of all the elements of a compliance program (project): compliance with applicable laws, rules, and regulations, internal policies, and procedures; accepted business practices, ethical standards, and contractual obligations. You will support the development of the compliance assurance process and lifecycle; and oversee security and technical controls testing across the organization to determine control effectiveness and adherence to both internal cybersecurity policies and standards and external requirements (e.g., certifications, mandates, regulations, and contracts).

Responsibilities:

OPERATIONS/PROJECT MANAGEMENT

• Lead the execution of Security & Compliance audits and assessments owned by the team, ensuring timely and high-quality delivery across all phases.
• Lead and manage end-to-end PCI DSS compliance assessments, including scope validation, assessment planning, control testing, evidence collection, and documentation in accordance with PCI DSS v4.0 requirements. Ensure all applicable controls are evaluated and appropriately supported across cardholder data and cloud environments.
• Coordinate directly with external Qualified Security Assessors (QSAs) during formal PCI DSS audits, manage timely collection of required artifacts, track remediation of identified issues, and support activities to ensure ongoing compliance within cardholder data environments (CDEs).
• Stay up to date on evolving Payment Card Industry standards and guidance, including PCI DSS v4.0 updates, emerging compliance trends, and industry best practices to ensure assessments remain aligned with current expectations.
• Assess, analyze, and drive remediation of security control deficiencies and compliance gaps; provide strategic guidance for sustainable mitigation and process optimization.
• Champion process improvement initiatives across cross-functional teams to strengthen the control environment and resolve assessment findings proactively.
• Independently investigate compliance issues or control deficiencies, perform root cause analysis, and prepare well-documented investigation reports with recommended actions.
• Lead and report on targeted audits and reviews, documenting findings and recommendations into clear and concise reports, and partnering with business stakeholders for timely remediation.
• Partner effectively with business stakeholders to facilitate timely and accurate audit/assessment evidence collection, support issue remediation, and nurture strong working relationships that promote accountability, trust, and long-term compliance collaboration.
• Advise in implementing solutions and mitigation plans for control deficiencies; regulatory and compliance gaps and make recommendations for process efficiencies.
• Drive process improvements and control implementation across business functions, including resolution of assessment findings and independent initiatives
• Participate in cross-functional teams to support various regulatory compliance subject matters ensuring that user activities continue to support systematic processes in place and drive positive compliant behaviors or that proposed new system changes fully meet Regulatory, Security and Legal requirements
• Maintain current knowledge of appliable global, federal, and state information security laws and accreditation standards
• Perform controls and overall compliance analysis based on the testing results through observations and reports to identify system and process gaps reducing risk for WBD.
• Document all work, and findings resulting from assessments, and communicate to relevant stakeholders within defined standard processes.

COLLABORATION

• Accountable for organizing and participating in and/or leading meetings with various stakeholders across the company, and across the globe.
• Technical and process experienced professional who will ensure data and evidence meets audit expectations and regulatory requirements.
• Responsible for establishing and tracking tasks and projects, assessment status, and are able to effectively communicate risks and overall status to your management in a timely manner.
• Stay abreast of existing and upcoming projects to effectively plan your work.
• Make updates to the centralized issues log, audit calendar, and other key team documents, ensuring accuracy, attention to detail, and overall status.

• Assist in updating metrics and status updates on a regular basis for your Manager.

• Ability to partner with other team members, contribute to building a positive team culture, learn internal processes, and contribute to building effective deliverables.

ANALYTICS

• Monitor the effectiveness of the compliance assessment process in accordance with agreed upon metrics and performance measures to drive continuous improvements.

• Conduct root cause analysis on recurring compliance issues to enhance process efficiency and reduce non-compliance incidents.
• Collaborate with cross-functional teams to gather, interpret, and validate compliance-related data to ensure accuracy and relevance.

The Essentials

• 4+ years working in audit, cyber security, and / or compliance environments in a corporate or consulting capacity, with experience in a highly technical setting.
• 2+ years executing PCI assessments or audits.
• Relevant certification (CISA, CISM, PCIP, CISSP, ISA, etc.) required.
• Bachelor’s degree in a technology-related field, or equivalent education-related experience.
• Experience with cross-functional risk, compliance and/or information security disciplines.
• Proven subject matter expertise and auditing experience in the areas of SOX, PCI, SSAE 18, GDPR/ CCPA/CPRA, Cloud Security, etc.
• Experience in project management, along with organizational and planning skills.
• Cloud certification and /or relevant experience assessing security and compliance in the cloud.
• Experience assisting with building compliance programs, including assessing and managing compliance against agreed standards at the level of individual security controls (administrative, technical / logical, physical) for multiple organizations or business units.
• In-depth knowledge of PCI DSS, including control requirements, scoping methodologies, evidence collection best practices, and audit preparation. Familiarity with PCI DSS v4.0.1, Merchent Levels, SAQ types, compensating controls, and application of PCI in cloud environments such as AWS is strongly preferred.

Required Skills, Competencies & Personal Attributes: 

• Possess the highest integrity commensurate with a compliance & ethics position.
• Demonstrate superior organization & communication skills.
• Produce deliverables of the highest quality, ensuring clear & polished work product, in narrative and visual form.
• Have strong quantitative and qualitative analysis skills.
• Have driven change to completion across functions in an IT or comparable technical environment.
• Work independently, are flexible and adaptive and demonstrate a passion to operate in a dynamic and fast-growing environment.
• Creative problem solver who possesses sound business discernment and is highly detailed oriented.
• Identify risks associated with business processes, operations, information security programs and technology projects.
• Develop working relationships with the business, and a broad understanding of business processes to translate technical issues into business-related decision points.
• Drive tasks forward with limited direction.
• Team player; works well with others; can build trust both internally and with different stakeholders throughout the organization.
• Ability to handle multiple assignments concurrently.
• A passion for accuracy and translating insights into a compelling narrative; able to maintain a balance between the details and the larger picture.
• Superior analytical and problem-solving skills.

The Nice to Haves

• 3+ years of Big 4 experience or in a related field (media, entertainment, business development or streaming services industry experience a plus).
• Experience working on Data Privacy Security Controls or Artificial Intelligence governance controls.
• Experience working in a national or global company.
• Comfortable working in a highly iterative environment, both structured and unstructured.
• Having worked as a QSA or ISA in the past.
• Technical and/or Audit experience with AWS and/or other Cloud Databases such as Azure, GCP, etc.
• Strong project management and team-building skills, including the ability to partner with various teams and drive projects and initiatives in multiple departments.
• Metrics and visualization tools knowledge a plus (i.e. Power BI, Tableau,)
• Advanced user of Microsoft Office (Excel, PowerPoint, Word) to prepare all project plans, deliverables, presentations, reports, and findings.