Business Analyst

General Purpose The IT Business Analyst (Vulnerability Remediation) protects our enterprise by validating, prioritizing, and driving remediation of security vulnerabilities across our environment – including Corporate HQ, stores, distribution centers, and supply chain systems. The role partners with Infrastructure and Application teams to reduce risk at scale, improve patch compliance, and ensure adherence to regulatory and industry frameworks (e.g., PCI‑DSS, SOX). It is a hands‑on position focused on scan analysis, false‑positive triage, remediation orchestration, and metrics reporting. Base salary range: $84,700 – $136,150. This range is complemented by additional rewards that vary by position and location. Essential Functions Assess drift scan results for Linux and document and test recommended solutions. Assist in developing and documenting remediation solution action plans. Develop and optimize pre‑ and post‑remediation standard operating procedures to ensure proper implementation without outages. Identify and influence innovative opportunities to improve the patch management program. Support internal and external audit and assessment evidence supporting the vulnerability remediation program. Contribute to continuous improvement of existing and new operational dashboards. Track remediation progress against compliance timelines and communicate remediation compliance metrics. Competencies People: Building Effective Teams, Developing Talent, Collaboration Self: Leading by Example, Communicates Effectively, Ensures Accountability and Execution, Manages Conflict Business: Business Acumen, Plans, Aligns and Prioritizes, Organizational Agility Specific: Builds Trust and Credibility, Dealing with Ambiguity, Customer Focus, Approachability Qualifications and Special Skills Required Undergraduate degree or equivalent work experience. 3–5 years of experience in vulnerability remediation management or security operations in a mid‑to‑large enterprise. Strong understanding of industry best practices for vulnerability remediation and supporting processes. Technical experience with Linux Operating Systems and Java vulnerability remediation principles. Excellent understanding of Linux systems. Excellent reporting and communication skills with the ability to present technical findings to varied audiences. Proficiency in collecting, analyzing, and disseminating threat solutions. Physical Requirements / ADA Job requires ability to work in an office environment, primarily on a computer. Requires sitting, standing, walking, hearing, talking on the telephone, attending in‑person meetings, typing, and working with paper/files. Vision requirements include the ability to see information in print and/or electronically. The role requires regular in‑office presence but can perform duties effectively using a combination of in‑office and remote work. Supervisory Responsibilities None Disclaimer This job description is a summary of the primary duties and responsibilities of the job and position. It is not intended to be a comprehensive or all‑inclusive listing of duties and responsibilities. Contents are subject to change at management's discretion. Equal Employment Opportunity Statement Ross is an equal employment opportunity employer. We consider individuals for employment or promotion according to their skills, abilities and experience. We believe that it is an essential part of the Company's overall commitment to attract, hire and develop a strong, talented and diverse workforce. Ross is committed to complying with all applicable laws prohibiting discrimination based on race, color, religious creed, age, national origin, ancestry, physical, mental or developmental disability, sex (including pregnancy, childbirth, breastfeeding and medical conditions related to pregnancy, childbirth or breastfeeding), veteran status, military status, marital or registered domestic partnership status, medical condition, genetic information, gender, gender identity, gender expression, sexual orientation, and any other category protected by federal, state or local laws. #J-18808-Ljbffr