Info Security Analyst Iii

Description
Job Summary
The Information Security Analyst III will join a dedicated team focused on finding and ensuring the remediation of vulnerabilities found in company systems and applications. The Information Security Analyst III participates in projects and works with business units to provide guidance related to vulnerability remediation. The incumbent will also support security systems that are used by the team to identify vulnerabilities in the MoneyGram environment. This support will include configuration of systems, analysis of output from these systems, and initiating jobs from these systems.
Primary Responsibilities

• Perform risk and vulnerability assessments of MoneyGram technology systems in a hybrid environment.
• Evaluate potential and identified vulnerabilities (CVEs, CWEs) for their applicability, exploitability, and impact to MoneyGram systems.
• Use industry standard methodologies such as CVSS (common vulnerability scoring system) to prioritize remediation efforts.
• Prepare audit evidence for compliance activities such as PCI, SOC1, and SOX.
• Design and implement process for the assignment, tracking, and reporting of vulnerability remediation status.
• Drive continuous improvements in MoneyGram's vulnerability detection and management capabilities.
• Serve as a liaison and facilitate external security assessments (e.g., Pen Testing)

Qualifications
Any combination of relevant education and experience and/or related professional designations/certifications in this field is highly desirable.
Education

• Minimum required: BA/BS Degree or equivalent work experience.

Experience
• 3+ years Information Security experience
Essential Skills

• Extensive experience with vulnerability assessment tools such as Tenable, Qualys, Rapid7
• Experience with analyzing application security scan results (SAST, DAST)
• Experience determining priority of vulnerabilities based on risk and impact.
• Strong analytical and problem-solving skills.
• Ability to adapt to potentially ever-changing situations and ability to work well under pressure.
• Sound knowledge of common infrastructure and web application vulnerability categorizations such as CVE, CVSS, CWE
• Excellent communication skills, both written and verbal.
• Excellent customer service skills.

Posting details:
Anticipated Base Performance Pay: $80,900-$110,000 (Bonus Target available for this role)
Day 1 Benefits to include:
• Customizable health plan-PPO/High Deductible Plan with Employer HSA Contribution
• 20 Days of Accrued PTO
• 13 Paid Holidays
• 2 Community Service Days
• 401k with Employer Match
• Parental Leave
• Employee Assistance Program
• Tuition Reimbursement
• Money Transfer Reimbursement
• Pet Insurance options
The salary/pay rate listed is a good faith determination that may be offered to a successful applicant for this position at the time of this job advertisement based on company hiring process and budget for this role and may be modified in the future. Actual compensation may vary from posting based on geographic location, work experience, education and/or skill level.