GRC Security Analyst: IT Compliance & Risk

FirstBank; San Juan (PR); On-site; USD 70,000 - 110,000; Full time

Job summary

FirstBank PR is seeking a Governance, Risk & Compliance (GRC) Analyst to join Corporate IT Security. You will assist the GRC Manager in maintaining the GRC program, implement security controls, and support audits across the organization in Puerto Rico and affiliated regions.

The role requires a bachelor's in information systems or computer science and 3–5 years of experience; CISA preferred. Bilingual English/Spanish communication is essential to engage with diverse stakeholders.

Qualifications

• Bachelor's degree in Information Systems or Computer Science required.
• 3–5 years of relevant experience.
• CISA certification preferred but not required.

Responsibilities

• Maintain the GRC program end-to-end.
• Maintain and enhance information security policies and procedures.
• Develop, monitor, and report information security metrics and dashboards.
• Conduct risk assessments and track remediation.
• Coordinate internal and external audits and regulatory examinations.
• Support third-party risk management and vendor governance.
• Communicate in English and Spanish with stakeholders.

Skills

Risk assessment

Information security

Policy development

Audit coordination

Vendor management

Regulatory compliance

Cross-functional collaboration

Education

Bachelor's degree in Information Systems or Computer Science

Job description

FirstBank PR is seeking a Governance, Risk & Compliance (GRC) Analyst to join Corporate IT Security. You will assist the GRC Manager in maintaining the GRC program, implement security controls, and support audits across the organization in Puerto Rico and affiliated regions.

The role requires a bachelor's in information systems or computer science and 3–5 years of experience; CISA preferred. Bilingual English/Spanish communication is essential to engage with diverse stakeholders.