Sr. Information Security Compliance Analyst

Warner Bros. Discovery • Atlanta, GA

3d • $89,390 - $166,010 • Hybrid

About The Position

The Sr. Information Security Compliance Analyst will join the Global Information and Content Security (GICS) team to support Warner Bros. Discovery globally across its US and international brands and divisions. The role leads and supports global PCI audits and partners with business units and stakeholders to ensure compliance with PCI requirements and other cybersecurity regulations and policies. The position involves PCI 4.0 assessments, risk analysis and mitigation, control testing, vulnerability remediation related to PCI ASV scanning, and continuous improvement of compliance processes and controls.

The analyst validates that critical processes and controls function end-to-end, identifies risk and control gaps, and participates in projects to assess potential regulatory compliance impacts. The role drives initiatives and helps manage and develop an effective compliance program, supporting compliance with applicable laws, regulations, internal policies and procedures, and accepted business practices. The position requires a hybrid schedule with three days onsite at the Atlanta office.

Requirements

• Bachelor’s degree in computer science, business administration, or a related technical field.
• At least 4 years of experience working in audit or compliance environments in a corporate or consulting capacity, including experience in a highly technical setting.
• At least 3 years of experience with PCI regulatory assessments or requirements.
• Previous PCI Qualified Security Assessor (QSA) certification is required.
• Experience testing cloud controls across AWS, Azure, and GCP.
• Experience defining certification or action-plan roadmaps that balance compliance deliverables, business requirements, and resource allocation.
• Relevant certification such as CISA, PCIP, CISM, or CISSP.
• Experience across cross-functional risk, compliance, and/or information security disciplines.
• Subject matter expertise in PCI, Data Privacy, SSAE 18, Swift, SOX, or related areas.
• Precise, detail-oriented work, with strong analytical and problem-solving skills.
• Strong relationship-building, communication, and project-management skills.
• Ability to prioritize and execute tasks in a high-pressure environment, handle changing priorities, and manage multiple projects.
• Ability to assess customer or client needs, develop solutions, and influence appropriate courses of action.
• High integrity appropriate to a compliance and ethics role.
• Ability to produce clear, polished written and visual work products.
• Ability to work independently and adapt in a dynamic, fast-growing environment.
• Strong quantitative, qualitative, and analytical skills, sound business judgment, and ability to exercise skepticism as needed.
• Ability to apply training and feedback effectively.

Nice To Haves

• At least 3 years of Big 4 experience in a related field.
• At least 3 years of experience in a related field such as media, technology, entertainment, business development, or streaming services.
• Knowledge of and interest in the media, entertainment, and technology industries, including industry players, trends, business models, and structure.
• Familiarity with streaming and similar products or services.
• Experience working in a national or global company.
• Knowledge of visualization tools such as Tableau or Power BI.
• Comfort working in a highly iterative environment.
• Creative problem-solving, sound business discernment, and strong attention to detail.
• Passion for accuracy and translating insights into a compelling narrative while balancing detail with the larger picture.

Responsibilities

• Lead and support PCI assessments globally, including assessment testing and review of control effectiveness.
• Communicate security compliance efforts, audit status, risks, and remediation progress to executive leadership, management, and stakeholders.
• Maintain project plans, task lists, milestones, assessment status, audit calendars, and centralized issues logs.
• Assist with information security assessments, audits, risk mitigation, and remediation; track remediation plans for control deficiencies and regulatory or policy gaps.
• Drive process improvements and control implementation across business functions, including resolution of assessment findings.
• Lead targeted compliance assessments, audits, and reviews; communicate results and recommendations in clear written reports and collaborate with management on corrective actions.
• Validate system requirements, data flows, procedures, and controls through testing and observation.
• Participate in cross-functional teams to support regulatory compliance and assess proposed system changes against Regulatory, Security, and Legal requirements.
• Analyze test results and observations to identify system and process gaps and reduce organizational risk.
• Document testing work and findings and communicate them to relevant stakeholders through established processes.
• Conduct ongoing security compliance monitoring in coordination with other compliance and operational assessment functions.
• Organize and lead meetings with stakeholders across the company and globally.
• Ensure data and evidence meet audit expectations and regulatory requirements.
• Track goals, project plans, assessment status, and risks; plan work in light of existing and upcoming projects.
• Assist with implementation of the Company GRC system, policies, standards, and processes.
• Create meaningful metrics and status updates, measure audit and assessment status, and monitor assessment-process effectiveness to drive continuous improvement.
• Build effective working relationships, contribute to a positive team culture, and support clear and accurate deliverables.

Benefits

• Health insurance coverage
• Employee wellness program
• Life insurance
• Disability insurance
• Retirement savings plan
• Paid holidays
• Sick time
• Vacation
• Annual bonuses, short- and long-term incentives, and program-specific awards may be available

What This Job Offers

• Job Type: Full-time
• Career Level: Senior