Risk

• Collaborate with FICO Cyber Security Team, Business and IT partners, and clients.
• Act as an internal subject matter expert with respect to Vulnerability and Compliance scanning and reporting.
• Implement new and iterate on existing technology to help identify and mitigate security issues.
• Validate and triage identified Threats.
• Contribute to team strategy in managing threats and vulnerabilities.
• Develop, evangelize, and iterate on threat & vulnerability management practices.
• Conducting required tasks for the vulnerability scanning program and publishing reported vulnerabilities to impacted teams for remediation.
• Triage and risk rank vulnerabilities according to severity and exposure.
• Work with Product and IT teams to risk rank and patch vulnerabilities related to the technology stack.
• Develop remediation plans for vulnerabilities.
• Initiate improvement activity to reduce risk, ensure compliance, lower cost, and improve quality within IT processes.
• Conduct/support periodic risk assessments and develop appropriate mitigation plans in support of deliverables.
• Continuous review of configuration management and vulnerability management posture inside the company and knowledge of all external developments that could bring new risks, including vendor patches, zero-day exploits, end-of-life systems or deprecated services.
• Strong thought process to enhance the current capabilities of Cloud asset management, Cloud vulnerability management & cloud patch management.
• Create reports to the stakeholders for effective remediation and metrics for leadership.

Threat Governance Engineer I

Risk Operations Specialist

Central Monitor II – Risk-Based Monitoring, Clinical Data Management