CyberSecurity Architect - GRC

Cognizant; Buenos Aires; Híbrido; ARS 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Descripción de la vacante

Cognizant in Argentina is seeking a Cybersecurity Governance, Risk & Compliance Analyst to strengthen the organization's cybersecurity and regulatory framework. You will collaborate with business and technology teams to maintain controls and address compliance gaps.

In this role you will manage regulatory and compliance activities (PCI DSS, BCRA, SOC), coordinate audits, support IAM governance, asset governance and third-party risk management, and contribute to policy and control improvements

Formación

• Knowledge of PCI DSS, BCRA regulatory requirements, and data privacy regulations.
• Experience analyzing, developing, and improving cybersecurity processes and controls.
• Experience with audit, risk, and compliance processes, including control testing and assessment.
• Experience managing audit evidence and the evidence lifecycle, including collection, validation, documentation, and follow-up.
• Experience supporting audit findings, compliance gaps, and remediation activities.

Responsabilidades

• Manage cybersecurity regulatory and compliance activities, including PCI DSS, BCRA requirements, SOC reviews, General IT Controls, and other applicable regulatory or audit requirements.
• Coordinate internal and external audits, G2G controls, gap analyses, control assessments, and remediation tracking, ensuring findings and compliance gaps are addressed.
• Support Identity and Access Management (IAM) governance, including access governance, process improvement, control definition, and ongoing compliance monitoring.
• Support cybersecurity asset governance and third-party risk management, including CMDB and cybersecurity asset inventories, cyber-risk documentation, and remediation of identified risks.
• Monitor regulatory requirements and maintain security policies, standards, processes, and controls, while providing cybersecurity and regulatory guidance to business units and key stakeholders.

Conocimientos

PCI DSS

BCRA regulatory requirements

data privacy regulations

cybersecurity processes and controls

audit, risk, and compliance processes

audit evidence management

Descripción del empleo

Job Summary

As a Cybersecurity Governance, Risk & Compliance Analyst, you will help strengthen the organization’s cybersecurity and regulatory compliance framework. You will work across audit, risk, access governance, asset management, and third-party security activities, partnering with business and technology teams to maintain effective controls, address compliance gaps, and continuously improve cybersecurity processes.

In this role, you will:

• Manage cybersecurity regulatory and compliance activities, including PCI DSS, BCRA requirements, SOC reviews, General IT Controls, and other applicable regulatory or audit requirements.
• Coordinate internal and external audits, G2G controls, gap analyses, control assessments, and remediation tracking, ensuring findings and compliance gaps are appropriately addressed.
• Support Identity and Access Management (IAM) governance, including access governance, process improvement, control definition, and ongoing compliance monitoring.
• Support cybersecurity asset governance and third-party risk management, including CMDB and cybersecurity asset inventories, cyber-risk documentation, security assessments, and remediation of identified risks.
• Monitor regulatory requirements and maintain security policies, standards, processes, and controls, while providing cybersecurity and regulatory guidance to business units and key stakeholders.

What you need to have to be considered

• Knowledge and practical experience with PCI DSS, BCRA regulatory requirements, and data privacy regulations.
• Experience analyzing, developing, and improving cybersecurity processes and controls.
• Experience with audit, risk, and compliance processes, including control testing and assessment.
• Experience managing audit evidence and the evidence lifecycle, including collection, validation, documentation, and follow-up.
• Experience supporting audit findings, compliance gaps, and remediation activities.

Work model

Hybrid