ISO Security Analyst

Banco Popular; San Juan; Híbrido; ARS 91.124.000 - 136.687.000; Jornada completa

Descripción de la vacante

Banco Popular is seeking an ISO Security Analyst to join the BISO Enablement Unit. You will support risk management, governance, and advisory activities across CISP teams and stakeholders.

The role emphasizes translating security policies into business requirements, conducting risk assessments, and performing vendor due diligence in a hybrid work setting.

Formación

• Bachelor’s degree in business administration, Computer Engineering, Computer Science, Information Technology, or related fields.
• Two years of related experience in information technology audit, information security, or vendor management preferred.
• Certifications such as CISA, CISM, CISSP preferable.

Responsabilidades

• Serve as liaison between business areas and Corporate Information Security & Privacy teams for security requests, requirements, and risk matters.
• Translate enterprise information security policies into business-aligned requirements and advisory guidance.
• Support security awareness and risk culture by communicating expectations and risks to stakeholders.
• Perform information security risk assessments for initiatives, applications, products, services, vendors and AI use cases as applicable.
• Conduct third-party vendor information security due diligence, including reviews and contract security assessments.
• Track and report information security risks, remediation plans, exceptions, and residual risk decisions.
• Prepare vendor due diligence reports and status updates for management oversight and decision-making.
• Contribute to governance activities including policy lifecycle management and documentation.
• Align documentation and control activities to cybersecurity frameworks, regulatory expectations, and internal governance requirements.

Conocimientos

Business acumen

Communication skills

Analytical skills

Problem solving

Project management

Regulatory/standards knowledge

Educación

Bachelor's degree in business administration, Computer Engineering, Computer Science, Information Technology, or related fields

Herramientas

Power BI

MS Office 365

Power Pivot

Descripción del empleo

Job Title:ISO Security Analyst

General Description

As an entry-level member of the Business Information Security Office (BISO) Enablement Unit, you will support the execution of information security risk management, governance, and business-aligned information security advisory activities in coordination with CISP teams, business stakeholders, and other control functions.

Essential Duties and Responsibilities:

• Serving as a liaison between assigned business or enablement areas and Corporate Information Security & Privacy teams for security requests, requirements, and risk-related matters.
• Assisting business units in translating enterprise information security policies, standards, and guidelines into practical, business-aligned requirements and advisory guidance.
• Support security awareness and risk culture initiatives by helping communicate information security expectations, risks, and requirements to business stakeholders in a clear and practical manner.
• Perform information security risk assessments for business initiatives, applications, products, services, vendors, and emerging technologies, including artificial intelligence use cases, as applicable.
• Perform third-party vendor information security due diligence activities, including ongoing vendor reviews, contract security reviews, and follow-up of identified risks or recommendations.
• Perform tracking, reporting, and follow-up of information security risks and issues, remediation plans, exceptions, action items, and residual risk decisions identified as a result of the ongoing vendor information security due diligence assessments.
• Prepare ongoing vendor information security due diligence reports and/or status updates to support management oversight, risk visibility, and decision-making.
• Contribute to the BISO Unit’s documentation governance activities, including the inventory, review, update, and lifecycle management of information security policies, standards, procedures, guidelines, and related repositories.
• Assist with the alignment of documentation and control activities to relevant cybersecurity frameworks, regulatory expectations, and internal governance requirements.

Education

Bachelor’s degree in business administration, Computer Engineering, Computer Science, Information Technology, or related fields.

Experience

Two (2) years of related experience in information technology audit, information security, or vendor management is preferred.

Certifications / Licenses

Certifications and licenses such as CISA, CISM, and CISSP are preferable.

Knowledge, Skills and Abilities (KSA’s)

• Strong business acumen: ability to understand the needs and concerns of business stakeholders and colleagues and respond promptly and effectively to stakeholder requests. Ability to conduct analysis on work procedures,business results and recommend changes to improve the effectiveness of the business's management.
• Strong technical acumen: knowledge of Information Security and Information Technology concepts. Ability to write technical instructions using programs and technology. Robust knowledge of applicable local and federal laws, regulations, and guidelines.
• Communication skills: effectively interact with internal and external stakeholders. Ability to foster trusting relationships with colleagues and clients. Highly develop written and verbal communications skills, strong abilityto communicate ideas (storytelling). Presents numerical data effectively. Superior communication andinterpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations,summaries, and reports for all audiences.
• Analytical skills: Stays focused on main issues, prevents irrelevant issues or distractions from interfering withtimely completion of assignments. Collects, research and complements data; Synthesizes complex or diverse information. Demonstrates attention to detail; Applies design principles; Generate creative solutions. Strongquantitative, research and analytical skills. Experience with data analysis, persuasive and informative writing,workload management, and process management.
• Problem Solving: Identifies and resolves problems in a timely manner; Develops alternative solutions.
• Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change. Knowledge on project coordination, identification of business needs, work plan,budget control, time management, resource allocation, team management and status reports. Mustdemonstrate leadership, logic, and reasoning skills.
• Operational/Regulations Processes: Knowledge on budget administration, resources allocation, organization’spolicies, and regulations. Ability to establish, conduct and track operational processes properly.
• Computer and Technological Skills: Proficient in MS Office 365. Experience with data management tools such asPower Pivot, and/or Power BI, among others is preferred. Basic knowledge of artificial intelligence technology is preferred. Ability to achieve results by providing innovative ways of working with operational and technological considerations.Knowledge of computer flow charts and programming logic and codes.

Region Locations

Puerto Rico or Colombia

Work Schedule

Hybrid

Important:

The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Our hybrid work model benefit applies to certain positions and is subject to changes based on the organizational needs.

ABOUT US

Popular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.

As employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.

We reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.

If you have a disability or need more information about requesting an accommodation, please contact us at [e-mail]. This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.

Are you ready for a rewarding career?

Popular is an Equal Opportunity Employer, including Disability/Vets

Learn more about us at www.popular.com and keep updated with our latest job postings at www.jobs.popular.com.

Connect with us!

LinkedIn | Facebook | Twitter | Instagram