Vulnerability Analyst ( Cybersecurity Assessment/Audit )

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

What You’ll Do
 

• The Cybersecurity Assessor will be responsible for conducting cybersecurity assessments on DFS managed systems and technologies, ensuring compliance to DFS Cybersecurity Standards.  The Cybersecurity Assessor will be responsible for managing all aspects of the assessment lifecycle and will be expected to contribute to the ongoing development and maturity of the Standards Assurance assessment programs.

• Responsible for compliance/vulnerability management framework, program optimization, evaluating vulnerabilities, remediation metrics reporting and assessing threats severity and impact on corporate assets.                                                            

• Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.                                                                     

How You’ll Do It
 

• Complete cybersecurity assessments on DFS managed systems and technologies, ensuring compliance to DFS Cybersecurity Standards.

• Manage assessment lifecycle beginning to end.  Assessment activities include pre-assessment meetings, artifact/evidence collection, assessment workflow management, cybersecurity assessment report generation and documenting risk associated with compliance issues.

• Responsible for assessment program maturity, ensuring assessment-related documentation and activities align with current DFS cybersecurity standards as well as the current threat landscape. 

• Contribute to the evolution of the assessment program ensuring alignment with enterprise and BT initiatives.

• The ideal candidate will have good customer focus, a positive attitude and excellent interpersonal, verbal and written communication skills.  The candidate must also possess a strong attention to detail.

• Support the other team and department functions as necessary, this includes support for the Cybersecurity Review Council and Financial Institution Audit functions.

• Support development and maintenance efforts associated with CSSA ServiceNow instance.

• Works independently to scope vulnerable bodies of technologies, identify weaknesses, severity and impact, and recommend paths to remediation.                                         

• Learns advanced Cybersecurity concepts including new and modern threat exploitation techniques of inside and outside bad actors.                                       

• Contributes to actionable intelligence in the form of reports, notifications, alerts and briefings.           

• Achieves team commitments (and influence others to do the same) by using informal leadership & highly developed communication skills.                                       

• Mentors novices by providing learning tasks as well as work related tasks, directs the work of advanced beginners, and helps them continue to grow.                                              

• Contributes to and leads security discussions at Discover. Has oversight on program impacting decisions. Guides team to achieve key results for assessment assignments

Minimum Qualifications

At a minimum, here’s what we need from you:

• Bachelors – Information Security, Business Administration and Management, Analytics             

• 4+ years of experience in Information Security, Cybersecurity, Computer Science, Data Analytics or related

• In lieu of education, 6+ years of experience in Information Security, Cybersecurity, Computer Science, Data Analytics or related                   

Internal applicants only: technical proficiency rating of Proficient on the Dreyfus Cyber engineering scale.

Physical and Cognitive Requirements
The physical requirements described here a