GRC IT Security Analyst - Risk & Compliance Leader

FirstBank

San Juan (PR)

On-site

USD 70,000 - 90,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

FirstBank PR is seeking a GRC Analyst to assess, prioritize, and drive remediation of cybersecurity, technology, and compliance risks across the organization. You will help design and improve governance, risk, and compliance programs aligned with regulatory requirements and industry standards.

The role partners with Finance, Legal, Audit, HR, and Technology teams to strengthen risk management and protect assets.

Qualifications

Bachelor’s degree in Information Systems or Computer Science and 3–5 years of relevant experience.
CISA certification preferred but not required.
Bilingual English/Spanish communication skills.

Responsibilities

Assist in maintaining and enhancing the GRC program, including policies, procedures, standards, and governance practices.
Support development, monitoring, and reporting of the Information Security Program with metrics, dashboards, and self-assessments.
Conduct risk assessments and track remediation to ensure timely resolution.
Coordinate internal and external audits and regulatory examinations with documentation and follow-up.
Monitor remediation of findings and ensure closure of deficiencies.
Review IT security controls and access management to support compliance and operational effectiveness.
Maintain vendor governance documentation and third-party risk management activities.
Support security awareness initiatives and participate in security and compliance projects.