> Markdown version of [/jobs/ext/1737054-senior-information-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/1737054-senior-information-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Risk Analyst - **Company:** Warner Bros. Entertainment Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $102,830.0 - $190,970.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Data Security, Information Security Management, Internet Protocol, Intrusion Detection and Prevention - **Published:** July 28, 2026 - **Apply:** https://warnerbros.wd5.myworkdayjobs.com/global/job/DC-Washington-820-1st-Street-NE/Senior-Information-Security-Risk-Analyst_R000107284 ## About the Role * BS/BA degree required * 3-5 years' experience in information security, with at least one (1) year experience in third party risk management * Knowledge of IP network infrastructure (firewalls, intrusion detection/prevention), access control, data encryption and physical security; Cloud security knowledge a plus * Excellent communication skills, including the ability to communicate effectively in English, both written and verbal * Ability to present complex topics in clear, non-technical language * Ability to work collaboratively within team and across business and technology functions * Detail-oriented individual with critical thinking, analytical, and problem-solving skills * Demonstrated ability to be proactive and take ownership of and solve problems * Active learner - able to enhance personal, professional, and business growth through new knowledge and experiences * Ability to handle multiple assignments concurrently within an iterative environment, * One or more of the following certifications: CISSP, CRISC, CISA * 2+ years of prior experience in a related field (media, entertainment, business development or streaming services industry experience a plus) * Familiarity with streaming and similar products/services * Experience working in a national or global company ## Description * Use WBD processes and tools to perform 3rd party vendor risk assessments, for new and existing vendors * Work with business to understand the "what" and "how" of services provided by vendor to assess level of risk and scope of assessment * Perform timely assessments of Vendor controls to identify, document, and communicate key deficiencies to the business and Information Security management * Report on assessment outcomes, risk level and associated recommendations to remediate issues * Perform 2nd-level peer reviews of assessment outputs, prior to reports being finalized, to drive consistency and completeness of findings based on risk of engagement * Assist with follow-up on documentation requests for initial and periodic assessments FINDINGS MANAGEMENT: * Monitor corrective action plans against agreed upon timelines * Review of remediation evidence for closure of findings CONTRACT REVIEWS: * Review contracts to ensure appropriate data security terms are included * Provide comment and acceptable alternatives to vendor contract revisions, in alignment with defined guidance * Escalate provision changes, as needed OTHER: * Assist with contract intake to ensure pipeline of assessments is managed in a timely and efficient manner * Provide periodic status updates * Maintain accurate and complete data within the identified system of record * Contribute to the team's continuous improvement efforts by identifying opportunities and helping to implement them ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Brewing Tea over the Internet](https://www.wearedevelopers.com/videos/697-brewing-tea-over-the-internet) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Software Developer Movies and Series](https://www.wearedevelopers.com/magazine/274-software-developer-movies-and-series) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)