InfoSec Vulnerability Metrics & Data Analyst

Position Overview

Experian is seeking a data-driven InfoSec Vulnerability Metrics & Data Analyst to contribute to the organization's security strategy and vulnerability management practices. This role will focus on establishing and maintaining regional and global reports for Cloud and Application Attack Surface Management, integrating a threat-informed approach, and enhancing Experian's capabilities through analytical reviews.

Company Description

Experian is a global data and technology company that empowers opportunities for individuals and businesses worldwide. We are involved in redefining lending, preventing fraud, simplifying healthcare, creating marketing solutions, and providing insights into the automotive market through our expertise in data, analytics, and software. We also assist individuals in achieving their financial goals and saving time and money.

Experian operates across diverse market segments including financial services, healthcare, automotive, agribusiness, and insurance. We invest in our people and advanced technologies to leverage the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we employ 22,500 people across 32 countries, with our corporate headquarters in Dublin, Ireland. Learn more at experianplc.com.

Responsibilities

As an InfoSec Vulnerability Metrics & Data Analyst, you will:

• Guide the development of vulnerability management metrics, incorporating feedback and sharing insights with senior leadership.
• Evaluate and define functional requirements for vulnerability, flaw, and misconfiguration metrics.
• Develop, maintain, and execute advanced reporting, dashboards, and scorecards.
• Communicate metrics to system owners and partners regarding outstanding vulnerabilities, issues, and concerns.
• Develop and automate vulnerability metrics through specific data collection, analysis, and charting procedures, collaborating with relevant teams.
• Determine requirements for technical solutions and tools to implement Vulnerability Metrics.
• Develop vulnerability Key Performance Indicators (KPIs) and metrics to demonstrate coverage and remediation effectiveness.
• Develop program efficacy metrics to support platform stability and improvements.
• Review business and internal requests for new or vulnerability management reporting, design solutions, and develop metrics.
• Collaborate with stakeholders to identify risk-based vulnerability management metrics that align with the security program and security risk management.
• Develop procedures to structure the metrics and reporting framework as part of a long-term strategy.
• Produce scoping documents outlining requirements for business requests.
• Provide recommendations based on data analysis and findings related to vulnerability management processes.
• Aggregate vulnerability data across technologies such as endpoints, servers, network equipment, and cloud, and interpret and present risk.

Qualifications

Your background should include:

• Bachelor's degree in Computer Science or a related field, or 5+ years of equivalent work experience in Cyber Security/Information Security and Vulnerability Management reporting.
• Experience with tools such as SQL, Tableau, PowerBI, and Excel.
• Experience in ServiceNow query and report development.
• Experience with collaboration tools such as ServiceNow and Confluence.
• Understanding of the end-to-end security metrics process, including collection, tracking, and reporting.
• Understanding of the Common Vulnerability Scoring System (CVSS), including calculations and the implications of base, temporal, and environmental scoring factors.
• Experience collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources to detail results and analyze findings for threat intelligence.
• Familiarity with the architecture, engineering, and operations of one or more relevant technologies.

Employment Details

• Employment Type: Full-time
• Location Type: Remote
• Salary: [Salary information not provided]