Cybersecurity Analyst | Risk & Audit Specialist

Triple-S; San Juan (PR); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Triple-S seeks an Information Security professional to develop and implement a comprehensive security program, including policies, processes and standards. The role includes conducting audit assessments and ensuring security configurations are maintained.

Key responsibilities include coordinating with IT and business partners, producing security documentation, addressing residual risk and vulnerabilities, and contributing to security architecture development.

Formación

• Bachelor's or higher in information systems or related IT field.
• Minimum five years of related IT/ cybersecurity experience.
• Relevant certifications (CISA, CISSP, CRISC) are preferred.

Responsabilidades

• Serves as liaison with IT and business partners to identify, document, and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions for residual risk and vulnerabilities; participates in IT projects to ensure security is addressed.
• Develops information security processes, policies and procedures; advices on SLAs and ensures controls are managed.
• Researches and recommends information security hardware/software including business cases for security investments.
• Leads audit-related initiatives, manages data collection, tracking, assessment and remedial activities.
• Supports development of security architecture.

Conocimientos

Security policy

Audit & compliance

Risk assessment

Vulnerability management

Security architecture

Educación

Bachelor's Degree in Information System

Associate's Degree in Information System

Herramientas

SIEM

Vulnerability scanners

Descripción del empleo

Triple-S seeks an Information Security professional to develop and implement a comprehensive security program, including policies, processes and standards. The role includes conducting audit assessments and ensuring security configurations are maintained.

Key responsibilities include coordinating with IT and business partners, producing security documentation, addressing residual risk and vulnerabilities, and contributing to security architecture development.