Business Analyst

• This position is available within the Application Security Management team and will be focused on managing the web application inventory used for recurring web application vulnerability scanning.
• This program is responsible for protection of the client brand through ongoing vulnerability scanning of Internet-facing client websites.
• Vulnerabilities identified are tracked and communicated to application teams for remediation.
• This position will be responsible for ensuring the ownership and details associated to the scans web applications are accurate as this impacts underlying reporting.

Responsibilities

• Reconcile ownership and URL changes from AIM (Application Inventory Management) with Web Application Vulnerability Management inventory on recurring basis
• Seek AXP ownership for web applications with no known point of contact
• Seek test credentials and test plastic from application teams where necessary
• Coordinate conference calls to be held between application teams and scanning partner
• Work with application teams to decommission websites as needed
• Generate weekly and monthly reports as necessary to communicate status of program to leadership
• Key participant in the advancement of the Web Application Vulnerability Management program
• Provides thought leadership and strategic improvements at all levels for the program including leveraging tools and influencing process improvements

Qualifications

• Strong understanding of spreadsheet management and workflow management processes
• Strong written and verbal communication skills
• Ability to manage multiple projects in a dynamic environment
• Self-driven with the ability to manage own delivery of challenging targets and solve problems with limited guidance
• Experience within American Express environment is considered a plus
• Demonstrated problem-solving skills
• Ability to persuade and influence through established credibility
• Excellent time management skills; ability to prioritize and multi-task

All your information will be kept confidential according to EEO guidelines.