Principal Cybersecurity Analyst

Company: Discover
Location: Deerfield
Posted on: May 12, 2022

Job Description:

Discover. A brighter future.With us, you ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine. Come build your future, while being the reason millions of people find a brighter financial future with Discover.Job Description At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career. As a Principal Cybersecurity Analyst, you will optimize cybersecurity program processes and output. Principal Cybersecurity Analysts at Discover contribute to the broader program roadmap. You ll play a key role in driving reporting accuracy and demand excellence in department deliverables. Responsibilities

• Manage and execute in-depth qualitative and quantitative cybersecurity risk assessments including policy/standard risk acceptance on various technologies.
• Generate relevant risk scenarios for common threats (e.g., data exfiltration, ransomware, DDoS, etc..) to draw attention to business impact and determine control effectiveness against the MITRE ATT&CK Framework.
• Communicate elevated risk in a concise manner to Senior Leadership within Cybersecurity and our 2nd line partners - Information Risk Management department.
• Continuously increase the effectiveness of Discover s Cybersecurity Risk Management program.
• Ability to maintain awareness of emerging cybersecurity threats. This position requires self-motivation and a strong willingness to learn. Minimum Qualifications At a minimum, here s what we need from you:
  • Bachelors Information Security, Information Technology, Analytics, Business or Project Management
  • 6+ Years Information Security, Information Technology, Business, Analytics, Project Management or related
  • In lieu of a degree 8+ Years Information Security, Information Technology, Business, Analytics, Project Management or related
  • Internal applicants only: technical proficiency rating of proficient on the Dreyfus cybersecurity scale Preferred Qualifications If we had our say, we d also look for:
    • Previous experience in performing quantitative risk assessments using Factor Analysis of Information Risk (FAIR)
    • One or more information security certifications: CISSP, CISM, CRISC, CISA, OpenFAIR
    • In-depth knowledge of cybersecurity concepts, methodology, processes, procedures, and controls.
    • Understanding of cybersecurity industry standards, benchmarks, methodologies and frameworks (e.g. NIST-CSF, PCI-DSS, CIS Controls, OWASP, STRIDE, MITRE ATT&CK and FAIR).
    • Experience performing Threat Modeling is a plus
    • Experience using an enterprise GRC platform
    • Understanding of information security risk and regulatory requirements
    • Excellent verbal & written communication skills along with analytical and problem-solving skills
    • Collaboration & team skills; with a focus on cross-group collaborationExternal applicants will be required to perform a technical interview. #L1- IR1 3Remote #Ni-RemoteWhat are you waiting for? Apply today!The same way we treat our employees is how we treat all applicants with respect. Discover Financial Services is an equal opportunity employer . We thrive on diversity & inclusion. You will be treated fairly throughout our recruiting process and without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status in consideration for a career at Discover. Associated topics: cybersecurity, iam, idm, information assurance, information security, leak, phish, security engineer, security officer, threat

Keywords: Discover, Arlington Heights , Principal Cybersecurity Analyst, Professions , Deerfield, Illinois