Cybersecurity & Risk Assurance Analyst

Triple-S Management Corp.; San Juan (PR); Sur place; USD 60 000 - 85 000; Plein temps

Résumé du poste

Triple-S Management Corp. is seeking a dedicated Information Security professional to develop and implement a comprehensive information security program, including defining security policies, processes, and standards.

The role focuses on audit assessments and maintaining security configurations across the organization. You will liaison with IT and business partners, create security documentation, and drive initiatives to address vulnerabilities, controls, and risk.

Qualifications

• Bachelor's or Associate degree in an IT-related field or equivalent IT experience.
• Five years or more of IT infrastructure and/or cybersecurity work experience.
• Certifications: CISA, CISSP, or CRISC.

Responsabilités

• Serves as liaison with IT and business area partners to identify, understand, document and advise on security requirements, impacts and risks.
• Develops and maintains documentation for security systems, procedures and security diagrams.
• Analyzes, proposes and implements solutions concerning residual risk and vulnerabilities; participates in IT projects to address security issues throughout the life cycle.
• Develops information security processes, policies and procedures; advises on SLAs and ensures security controls are managed and maintained.
• Researches, evaluates and recommends information security hardware and software including business cases for security investments.
• Leads audit-related initiatives managing relationships, data collection, progress tracking, assessment and remediation.
• Assists and supports development of security architecture.

Connaissances

Action Oriented

Manages Ambiguity

Formation

Bachelor's Degree in Information System

Associate's Degree in Information System

Outils

CISA

CISSP

CRISC

Description du poste

Triple-S Management Corp. is seeking a dedicated Information Security professional to develop and implement a comprehensive information security program, including defining security policies, processes, and standards.

The role focuses on audit assessments and maintaining security configurations across the organization. You will liaison with IT and business partners, create security documentation, and drive initiatives to address vulnerabilities, controls, and risk.