Cybersecurity Analyst

Triple-S Management Corp.; San Juan (PR); On-site; USD 60,000 - 85,000; Full time

Job summary

Triple-S Management Corp. is seeking a dedicated Information Security professional to develop and implement a comprehensive information security program, including defining security policies, processes, and standards.

The role focuses on audit assessments and maintaining security configurations across the organization. You will liaison with IT and business partners, create security documentation, and drive initiatives to address vulnerabilities, controls, and risk.

Qualifications

• Bachelor's or Associate degree in an IT-related field or equivalent IT experience.
• Five years or more of IT infrastructure and/or cybersecurity work experience.
• Certifications: CISA, CISSP, or CRISC.

Responsibilities

• Serves as liaison with IT and business area partners to identify, understand, document and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions concerning residual risk and vulnerabilities; participates in IT projects to address security issues throughout the life cycle.
• Develops information security processes, policies and procedures; advises on SLAs and ensures security controls are managed and maintained.
• Researches, evaluates and recommends information security hardware and software including business cases for security investments.
• Leads audit-related initiatives managing relationships, data collection, progress tracking, assessment and remediation.
• Assists and supports development of security architecture.

Skills

Action Oriented

Manages Ambiguity

Education

Bachelor's Degree in Information System

Associate's Degree in Information System

Tools

CISA

CISSP

CRISC

Job description

At Triple-S, we are committed to providing meaningful job experiences for Valuable People (Gente Valiosa). We strive for excellence in everything we do, from the way we work together to the way we serve our customers.

When you join Triple-S, you will be key to our efforts on delivering high-quality and affordable healthcare as well as contribute to our purpose to enable healthier lives. We serve more than 1 million consumers in Puerto Rico through our Medicare Advantage, Medicaid, Commercial, Life and Property & Casualty Businesses.

JOB SUMMARY

Develops and implements a comprehensive information security program including defining security policies, processes and standards. They perform audit assessments and define processes and standards to ensure that security configurations are maintained.

ESSENTIAL FUNCTIONS

• Serves as a liaison with IT and business area partners to identify, understand, document and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions concerning residual risk, vulnerabilities and other security exposures. Participates on IT projects to ensure that security issues are addressed throughout the project life cycle. Participates in initiatives to identify, select and implement technical controls.
• Develops information security processes, policies and procedures. Advises on service level agreements and works to ensure that security controls are managed and maintained.
• Researches, evaluates and recommends information security related hardware and software including development of businesses cases for security investments.
• Serves as a liaison and lead on audit-related initiatives managing relationships, collection of data, progression tracking, assessment and remedial activities.
• Assists and supports the development of security architecture.

EDUCATION

• Bachelor's Degree in Information System
• Associate's Degree in Information System

EXPERIENCE

• Associate Degree (60-64 credits) or Bachelor degree in an IT related field or equivalent IT. IT Infrastructure and/or Cybersecurity work experience. Five years or more of related work experience.
• CISA, CISSP, or CRISC

LICENSES AND CERTIFICATIONS

• CISA - Certified Information Systems Auditor
• CISSP- Certified Information Systems Security Professional

COMPETENCIES

• Action Oriented
• Manages Ambiguity

It is company policy to seek for the qualified applicants for positions throughout the company without distinction of race, color, national origin, religion, sex, gender identity, real or perceived sexual orientation, civil status, social condition, political ideologies, age, physical or mental disability, veteran status or any other characteristic protected by law. Drug-free company.

Equality Employment Opportunity/Affirmative Action for People with Disabilities/Veterans. Employer with E-Verify to verify the eligibility of employment of all the new employees.