Exposure Management Analyst

Job Responsibilities: Support day-to-day operations of the exposure management program, including data review, report processing, and trend analysis. Track remediation of identified risks and mitigation strategies and escalate findings to key stakeholders.

Ability to analyze potential security risks and determine applicability to our environment

Execute emergency vulnerability workflows and procedures

Stay informed about publicly disclosed vulnerabilities (CVEs) and potential vulnerabilities (rumors, blogs, partial public analysis).

Map vulnerability assessment results to asset inventory and key stakeholders. Calculate prioritization based on risk assessment.

Identify and recommend appropriate compensating controls to manage and remediate vulnerability risk with the focus on reducing potential impacts

Support development of vulnerability metrics and remediation-related dashboards and reports

Understand enterprise policies and advise policies and technical standards with specific regard to vulnerability management, scanning procedures and secure configuration

Coordinate with key business partners to understand, prioritize, and coordinate vulnerability remediation activities

Collaborate with peers from across the organization and maintain excellent working relationships with key partners across Technology Organization functions and business partners

Understand business requirements and work with business partners to define appropriate solutions, meeting both security mandates and business needs

Demonstrates strong critical thinking and curiosity, essential for effectively analyzing and addressing security threats and vulnerabilities.

Demonstrate Southern Company values of Safety First, Unquestionable Trust, Superior Performance, and Total Commitment

Job Requirements : Required to submit to a thorough background examination

Ability to understand business requirements and present appropriate solutions

Ability to work independently or within a team

Ability to effectively organize tasks, manage multiple priorities/details, meet schedules, and deliver on commitments

Solid verbal and written communication skills

Demonstrated critical, independent thinking; demonstrated ability to conceive and present creative solutions

Must pass NERC CIP & Insider Threat Protection background checks

One or more relevant industry certifications (i.e., GSEC, CISSP, CISA)

Occasional travel to local and regional locations in pursuit of job duties and requirements