Principal Cybersecurity Analyst

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

What You'll Do

• Optimizes cybersecurity program processes and output. Contributes to the broader program roadmap. Drives reporting accuracy and demand excellence in department deliverables.
• Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

How You'll Do It

• Manages and executes cybersecurity risk assessments using qualitative and quantitative methodologies to support the organization's overall security posture.
• Maintains an awareness of emerging cybersecurity threats by analyzing and reporting on cybersecurity risk against various Cybersecurity Frameworks (NIST CSF, NIST 800-53, PCI-DSS).
• Performs in-depth analysis of security issues and vulnerabilities using tools including WhiteHat, Veracode, and Qualys to ensure compliance with audit, regulatory and legal requirements.
• Designs metrics and develops advanced capabilities to ensure confidentiality, integrity, availability, authentication, and non-repudiation to communicate elevated risk in a business-friendly manner to Cybersecurity Leadership and 2nd line partners. Proactively identifies and reports control deficiencies as issues within action plans.
• Conduct strategic and operational effectiveness assessments as required for cyber events, and regulatory and audit reviews.
• Partner with Product Owners to evaluate current security posture and drive future security control implementations based on gaps found during the cybersecurity risk assessment.
• Utilizes ServiceNow and Cyber Risk System for risk management and risk remediation, processing potential security exceptions and/or risk acceptances against established security policies and standards.
• Documents risk assessments in Archer enterprise governance, risk and compliance tool for review by external regulators and auditors. Prepares department, committee, and board-level reports and presentation materials.
• Gathers and challenges data, evidence, or statuses for accuracy to achieve initiative and risk mitigation completion.

Qualifications You'll Need
Minimum Requirements

• Bachelors Information Security, Information Technology, Analytics, Business Administration and Management, Project Management, or related.
• 6+ years Information Security, Information Technology, Business, Analytics, Project Management or related
• For roles requiring Dreyfus Rating – Internal applicants only: technical proficiency of Proficient on the Dreyfus scale.

In Lieu of Education Experience

• 8+ years Information Security, Information Technology, Business, Analytics, Project Management or related

Preferred Requirements

• PMP
• GIAC
• CISSP

Physical and Cognitive Requirements
The physical requirements described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable a qualified individual with disabilities to perform the essential functions of the position as required by federal, state, and local laws:

• Primarily remain in a stationary position.
• No required movement about the work environment to complete the major responsibilities of the job.
• Primarily performed indoors in an office setting.
• Ability to operate office equipment such as but not limited to computer, telephone, printer, and calculator.
• Ability to communicate verbally. Ability to communicate in written form.
• Travel Requirements - Travel up to 10% of the time.

External applicants will be required to perform a technical interview.

Discover will not sponsor or transfer employment work visas for this position. Applicants must be currently authorized to work in the United States on a full-time basis.

#LI-AS1

#REMOTE

Application Deadline:

The application window for this position is anticipated to close on Aug-19-2025. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.