Jobs and Careers

Senior Associate Information Security Risk Analyst

Riverwoods, IL, United Statesfull_timeVerifiedPosted 4 Jan 2024

💰 $109,800/yr($65,000/yr – $109,800/yr)

About the role

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

Contribute to and support the effective challenge efforts across the organization to ensure the appropriate management of Information Security risk. This individual will support evaluation of the Cybersecurity roadmap and contributes to recommendations for delivering a secure system, remediation, application development, technical projects and regulatory and risk requirements. This includes the Information Security framework, program optimization, vulnerability remediation, metrics reporting, performance analysis and mitigation of operational risk. Requires high-level critical thinking to perform duties related to projects, compliance, metrics, assurance, vulnerabilities or threats. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

Responsibilities

Participate in advisement effort to business and technology teams concerning Information Security risks and compensating controls to meet enterprise goals with appropriate countermeasures. Analyzes and evaluates vulnerabilities and assesses threats including impact to operations.
Supports analysis of security issues and/or vulnerabilities. Ensures compliance to audit, regulatory and legal requirements. Recommends appropriate and effective controls to address security concerns.
Executes technical, program, or control assessments against defined assessment criteria to ensure compliance with Information Security policies, standards, and controls.
Demonstrates process management principles for documentation and problem-solving including root cause analysis, identifying solutions and presentation of process improvement.
Draft, review, and edit reports and formal findings as the result of Information Security assessments and evaluations.
Reviews metrics, reporting, and self-assessments by other business areas to identify deficiencies and effectively challenges them against Information Security Program policies, standards, controls, and industry best practices.

Minimum Qualifications

At a minimum, here’s what we need from you:

Bachelors degree in Information Technology, Information Security, Business, Security and Intelligence, Computer Science, or related.
4+ years of experience in Information Security, Computer Science, Business Analysis, Data Analytics, or related.
In lieu of education, 8+ years of experience in Information Security, Computer Science, Business Analysis, Data Analytics, or related.

Preferred Qualifications

If we had our say, we’d also look for:

6+ years of experience in Information Security, Computer Science, Business Analysis, Data Analytics, or related.

CISSP, CISA, GSEC, CISM, CRISC, CDPSE, CCSP, or similar.

Application Deadline:

The application window for this position is anticipated to close on Jan-09-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.

Compensation:

The base pay for this position generally ranges between $65,000.00 to $109,800.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors, such as but not limited to, geographical location, relevant experience, education, and skill level may impact the pay for this position.

Benefits:

We also offer a range of benefits and programs based on eligibility. These benefits include: