Expert Vulnerability Analyst ( Third Party Vendor Risk Management )

Job Description

We are looking for an Expert Vulnerability Analyst to join Discover Financial Services. As an Expert Vulnerability Analyst, you will be a key player in driving cybersecurity strategic compliance and vulnerability management decisions. Your role involves overseeing compliance and vulnerability management roadmaps and providing resilient support for next-generation systems.

Responsibilities

• Act as an advisor to upper management in cybersecurity matters.
• Direct security solutions and technical assurance aligned with business risk and regulatory requirements.
• Design metrics models and develop advanced capabilities for cybersecurity performance and risk indicators.
• Mentor and provide leadership on risk-based security assessments and vendor assessments.
• Collaborate with stakeholders including internal partners, auditors, and vendors.
• Manage the life cycle of cyber findings and liaison with stakeholders for permanent remediation.
• Keep abreast of emerging threat actors' techniques and procedures.
• Lead vendor risk discussions and oversee program impacting decisions.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Security, Business, or related field.
• 8+ years of experience in Information Security, Cybersecurity, or related fields.

Preferred Qualifications

• 6+ years in core third party vendor risk management with at least 2 years in a leadership role.
• Experience with industry cybersecurity frameworks such as NIST 800-53, PCI-DSS, etc.
• GIAC, CISSP, or CISM certifications preferred.
• Understanding of Agile methodology and principles of enterprise risk management.