<p>Company Overview</p> <p>Credit First National Association is a private label credit card bank and the consumer credit division of Bridgestone Americas. The Bridgestone Americas family of enterprises, including CFNA, is comprised of more than 50 production facilities and 55K employees throughout the Americas. We provide the consumer credit solution for the Firestone Complete Auto Care, Tires Plus, and Wheel Works brands, in addition to customized retail credit services for more than 8,000 other tire and automotive retailers nationwide. At our office in Cleveland, OH, more than 300 professionals gather each day to run a successful private label credit card program. We invest in our community and strongly believe that meaningful commitment to a wide variety of philanthropic organizations builds a better world and a brand that makes us proud.</p> <p>Position Summary</p> <p>We are seeking a Vulnerability Analyst like you to join our amazing CFNA team.</p> <p>The Vulnerability Analyst is a key member of the Cybersecurity team, responsible for the continuous monitoring of CFNA's network to identify cybersecurity risks and assist in implementing solutions to mitigate those risks.</p> <p>We are relentlessly focused on empowering you with unique opportunities to make a meaningful impact and help shape your career.</p> <p>Responsibilities</p> <p>In this role, your primary responsibilities will include:</p> <p>Primary Responsibilities</p> <ul> <li>Identify privacy and security concerns. </li><li>Monitor computer configurations and data files to incorporate new software and virus protection systems, correct errors, or modify individual access statuses. </li><li>Utilize security intelligence and technical resources to assess applicable threats to CFNA servers and data. </li><li>Conduct reviews of account permissions, data access needs, security violations, and programming changes. </li><li>Perform vulnerability scans of networks and applications to evaluate effectiveness and identify weaknesses. </li><li>Assist with patching identified vulnerabilities using patch management systems. </li><li>Collaborate closely with the Infrastructure Support team to implement security controls and patches. </li><li>Ensure compliance with internal security policies and procedures, as well as PCI-DSS, FFIEC, GLBA, and other relevant banking regulations. </li><li>Provide technical support for security software and hardware. </li><li>Communicate clearly and maintain a friendly demeanor while interacting with team members and other departments. </li><li>Maintain a positive "can-do" attitude to foster good team chemistry in a collaborative environment. </li><li>Demonstrate proven project management skills to effectively handle multiple priorities simultaneously. </li></ul> <p>Secondary Responsibilities</p> <ul> <li> <p>Research and support the implementation of new security tools while consolidating existing tools.</p> </li><li> <p>Serve as a backup for the following security functions:</p> </li><li> <p>Privileged Access Management tool administration</p> </li><li> <p>Internet Proxy support and administration</p> </li><li> <p>Data Loss Prevention tool support</p> </li><li> <p>Planning and orchestrating Security Awareness Training and Phishing Tests</p> </li><li> <p>Incident Notification Response</p> </li><li> <p>Monitor network traffic for security incidents and events.</p> </li><li> <p>Oversee systems and procedures to protect data systems and databases from unauthorized access.</p> </li><li> <p>Administer and troubleshoot Physical Security systems, including badging and CCTV cameras.</p> </li></ul> <p>Typically requires a bachelor's degree and a minimum of 2 years of related experience; or an advanced degree without experience; or equivalent work experience.</p> <p>Professional certifications in the field of cybersecurity are highly recommended.</p> <p>We are building a team as diverse as the world we serve. We believe in championing all perspectives, individuals, and teams. If you find this opportunity compelling, we encourage to apply.</p>