Lead Technical Auditor

Ampstek; Buenos Aires; Presencial; ARS 1.200.000 - 1.900.000; Jornada completa

Descripción de la vacante

Ampstek is seeking a Security & Compliance Analyst to drive regulatory programs across PCI DSS, BCRA, and data privacy. You will define controls, monitor governance frameworks, and coordinate internal and external audits.

You will manage remediation, support third-party risk, and provide guidance to business units. Advanced English and related certifications are preferred.

Formación

• Expertise with PCI DSS, BCRA, and Data Privacy regulations.
• Experience in the analysis and development of cybersecurity-related processes.
• Expertise in audit and compliance processes, including controls testing and evidence lifecycle management.

Responsabilidades

• Ensure regulatory compliance across PCI, SOC, IT controls, and BCRA.
• Lead audits, gap analyses, remediation tracking, and evidence lifecycle management.
• Redefine IAM, access governance, and controls.
• Oversee asset inventory and cyberrisk documentation.
• Provide security guidance to business units and collaborate with stakeholders.

Conocimientos

PCI DSS

BCRA compliance

Data privacy

Audit & governance

Educación

Bachelor's degree in Computer Science / MIS

Ongoing studies in related field

Descripción del empleo

Job Description & Responsibilities

• Ensure regulatory compliance (PCI, SOC, General IT Control, New BCRA).
• Manage G2G controls, audits, gap analysis, and remediation tracking.
• Redefine IAM (Identity and Access Management) processes, access governance, and controls.
• Manage Asset Inventory (CMDB), cybersecurity asset tracking, and cyberrisk documentation.
• Monitor regulatory requirements, maintain security policies and standards, and ensure ongoing compliance with applicable laws, regulations, and governance frameworks.
• Coordinate internal and external audits, conduct compliance reviews and control assessments, and oversee the remediation of audit findings (including Gartner findings), compliance gaps, and security incidents.
• Provide security and regulatory guidance to business units, support third-party security assessments (3er Party Risk), and collaborate with stakeholders to define, implement, and maintain security controls across the organization.

Must-Have Qualifications

• Expertise with PCI DSS, BCRA (Central Bank of Argentina), and Data Privacy regulations.
• Experience in the analysis and development of cybersecurity-related processes.
• Expertise in audit and compliance processes, including controls testing and evidence lifecycle management.

Preferred Qualifications

• Advanced level of English language.
• Bachelor's degree or ongoing studies in Computer Science, Management Information Systems, or another related field.
• CRISC, CISM, or CISA certifications preferred