Business Analyst

• This position is available within the Application Security Management team and will be focused on managing the web application inventory used for recurring web application vulnerability scanning. 

• This program is responsible for protection of the client brand through ongoing vulnerability scanning of Internet-facing client websites. 

• Vulnerabilities identified are tracked and communicated to application teams for remediation. 

• This position will be responsible for ensuring the ownership and details associated to the scans web applications are accurate as this impacts underlying reporting. 

Responsibilities:

• Reconcile ownership and URL changes from AIM (Application Inventory Management) with Web Application Vulnerability Management inventory on recurring basis 

• Seek AXP ownership for web applications with no known point of contact 

• Seek test credentials and test plastic from application teams where necessary 

• Coordinate conference calls to be held between application teams and scanning partner 

• Work with application teams to decommission websites as needed 

• Generate weekly and monthly reports as necessary to communicate status of program to leadership 

• Key participant in the advancement of the Web Application Vulnerability Management program 

• Provides thought leadership and strategic improvements at all levels for the program including leveraging tools and influencing process improvements 

Qualifications:

• Strong understanding of spreadsheet management and workflow management processes 

• Strong written and verbal communication skills 

• Ability to manage multiple projects in a dynamic environment 

• Self-driven with the ability to manage own delivery of challenging targets and solve problems with limited guidance 

• Experience within American Express environment is considered a plus 

• Demonstrated problem-solving skills 

• Ability to persuade and influence through established credibility 

• Excellent time management skills; ability to prioritize and multi-task

All your information will be kept confidential according to EEO guidelines.