Cybersecurity Analyst ( Cybersecurity Risk and Control )

$88,500 - $149,300/Yr

Discover Financial Services - Riverwoods, IL

Full-time - Mid Level

Riverwoods, IL

1,001-5,000 employees

Credit Intermediation and Related Activities

About the position

The Cybersecurity Analyst position within the Cybersecurity Risk and Control team at Discover Financial Services is designed for a motivated and detail-oriented individual. The role focuses on supporting senior team members in conducting risk assessments, evaluating security controls, and implementing risk mitigation strategies. The analyst will be responsible for assessing and managing risks, ensuring compliance with regulatory requirements, and actively managing risk and customer-impacting issues.

Responsibilities

• Assist in conducting cybersecurity risk assessments to identify potential threats and vulnerabilities within the organization's infrastructure and application.
• Support the evaluation of security controls to ensure their effectiveness in mitigating identified risks.
• Participate in the development and maintenance of risk assessment and control self-assessment documentation.
• Collaborate with cross-functional teams to assist in the identification, assessment, and management of cybersecurity risks.
• Assist in evaluating the effectiveness of security controls and implementing risk mitigation strategies and controls.
• Help in the development of documentation of the processes and procedures following the Cybersecurity policies and standards.
• Stay informed about the latest cybersecurity trends, threats, and technologies.
• Provide administrative support to the cybersecurity Risk & Control team as needed.
• Assist in mapping the organization's cybersecurity standards to the industry frameworks and its applicable controls.
• Facilitate the creation and maintenance of risk and control metrics to report on compliance and risk status.
• Deliver metrics and performance reporting to enhance real-time risk decisions and initiative prioritization.
• Collaborate with cross-functional resources to drive progress toward cyber initiatives or risk remediation deliverables.
• Coordinate all exam management requests with program owners.
• Collect, review, and upload all artifacts submitted as evidence in advance of requested dates.
• Assist in compiling management corrective action plans for risk item closure.
• Perform due diligence and validation on identified risk findings.

Requirements

• Bachelor's degree in Information Security, Information Technology, Analytics, Business Administration and Management, or Project Management.
• 4+ years of experience in Information Security, Information Technology, Business, Analytics, Project Management, or related fields.
• In lieu of education, 6+ years of experience in Information Security, Information Technology, Business, Analytics, Project Management, or related fields.

Nice-to-haves

• Relevant Cybersecurity certifications such as CISSP, CISM, CRISC, GIAC or equivalent.
• Minimum of 6 years of experience in Cybersecurity Risk Management.
• Strong understanding of cybersecurity principles, threats, and vulnerabilities.
• In-depth knowledge of risk management frameworks such as NIST CSF, ISO 27001, CRI, and COBIT.
• Strong analytical, problem-solving skills and attention to detail.
• Excellent communication and interpersonal skills.
• Ability to work effectively both independently and as part of a team.
• Willingness to learn and adapt in a fast-paced environment.
• Knowledge of security controls and their assessment methodologies.
• Experience with GRC and Process Mapping tools.
• Ability to work under pressure and manage multiple priorities.
• Experience in a similar role within a large enterprise or Financial organization.

Benefits

• Paid Parental Leave
• Paid Time Off
• 401(k) Plan
• Medical, Dental, Vision, & Health Savings Account
• STD, Life, LTD and AD&D
• Recognition Program
• Education Assistance
• Commuter Benefits
• Family Support Programs
• Employee Stock Purchase Plan