Cybersecurity Analyst

Triple-S; San Juan (PR); In loco; USD 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Triple-S seeks an Information Security professional to develop and implement a comprehensive security program, including policies, processes and standards. The role includes conducting audit assessments and ensuring security configurations are maintained.

Key responsibilities include coordinating with IT and business partners, producing security documentation, addressing residual risk and vulnerabilities, and contributing to security architecture development.

Competenze

• Bachelor's or higher in information systems or related IT field.
• Minimum five years of related IT/ cybersecurity experience.
• Relevant certifications (CISA, CISSP, CRISC) are preferred.

Mansioni

• Serves as liaison with IT and business partners to identify, document, and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions for residual risk and vulnerabilities; participates in IT projects to ensure security is addressed.
• Develops information security processes, policies and procedures; advices on SLAs and ensures controls are managed.
• Researches and recommends information security hardware/software including business cases for security investments.
• Leads audit-related initiatives, manages data collection, tracking, assessment and remedial activities.
• Supports development of security architecture.

Conoscenze

Security policy

Audit & compliance

Risk assessment

Vulnerability management

Security architecture

Formazione

Bachelor's Degree in Information System

Associate's Degree in Information System

Strumenti

SIEM

Vulnerability scanners

Descrizione del lavoro

At Triple-S, we are committed to providing meaningful job experiences for Valuable People (Gente Valiosa). We strive for excellence in everything we do, from the way we work together to the way we serve our customers.

When you join Triple-S, you will be key to our efforts on delivering high-quality and affordable healthcare as well as contribute to our purpose to enable healthier lives. We serve more than 1 million consumers in Puerto Rico through our Medicare Advantage, Medicaid, Commercial, Life and Property & Casualty Businesses.

Job Summary

Develops and implements a comprehensive information security program including defining security policies, processes and standards. They perform audit assessments and define processes and standards to ensure that security configurations are maintained.

Essential Functions

• Serves as a liaison with IT and business area partners to identify, understand, document and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions concerning residual risk, vulnerabilities and other security exposures. Participates on IT projects to ensure that security issues are addressed throughout the project life cycle. Participates in initiatives to identify, select and implement technical controls.
• Develops information security processes, policies and procedures. Advises on service level agreements and works to ensure that security controls are managed and maintained.
• Researches, evaluates and recommends information security related hardware and software including development of businesses cases for security investments.
• Serves as a liaison and lead on audit-related initiatives managing relationships, collection of data, progression tracking, assessment and remedial activities.
• Assists and supports the development of security architecture.

EDUCATION

• Bachelor's Degree in Information System
• Associate's Degree in Information System

Experience

• Associate Degree (60-64 credits) or Bachelor degree in an IT related field or equivalent IT. IT Infrastructure and/or Cybersecurity work experience. Five years or more of related work experience.
• CISA, CISSP, or CRISC

LICENSES AND CERTIFICATIONS

• CISA - Certified Information Systems Auditor
• CISSP- Certified Information Systems Security Professional

COMPETENCIES

• Collaborates
• Action Oriented
• Customer Delight (Employee)
• Instills Trust
• Manages Ambiguity

It is company policy to seek for the qualified applicants for positions throughout the company without distinction of race, color, national origin, religion, sex, gender identity, real or perceived sexual orientation, civil status, social condition, political ideologies, age, physical or mental disability, veteran status or any other characteristic protected by law. Drug-free company.

Equality Employment Opportunity/Affirmative Action for People with Disabilities/Veterans. Employer with E-Verify to verify the eligibility of employment of all the new employees.

We encourage Veterans and Disabled to Apply.