Hybrid ISO Security Analyst – Risk & Vendor Oversight

Popular Bank; Colorado; Hybrid; USD 65,000 - 90,000; Full time

Job summary

Popular Bank in Puerto Rico is seeking an ISO Security Analyst to join the BISO Enablement Unit as an entry-level risk specialist. You will support information security risk management, governance, and advisory activities in coordination with CISP teams.

You will liaise with security and business stakeholders, translate policies into actionable requirements, perform risk assessments, due diligence for vendors, and contribute to policy documentation and regulatory alignment.

Qualifications

• Bachelor’s degree in a related field; two years IT audit or security experience preferred.
• Experience in information security, governance or vendor management preferred.
• Certifications such as CISA, CISM or CISSP are preferable.
• Strong written and verbal communication skills.

Responsibilities

• Serve as liaison between business areas and Corporate Information Security & Privacy teams.
• Translate security policies into practical, business-aligned requirements.
• Support security awareness and risk culture initiatives.
• Perform information security risk assessments for initiatives, apps, products, services, vendors, and AI use cases.
• Conduct third-party vendor information security due diligence and follow-up risks.
• Prepare vendor due diligence reports for management oversight.
• Contribute to documentation governance of policies, standards, and procedures.
• Align documentation and controls with cybersecurity frameworks and regulatory expectations.

Skills

Business acumen

Technical acumen

Communication skills

Analytical skills

Problem solving

Project management

Regulatory knowledge

Power BI

AI awareness

Education

Bachelor’s degree in Business Administration

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Technology

Tools

MS Office 365

Power BI

Power Pivot

Job description

Popular Bank in Puerto Rico is seeking an ISO Security Analyst to join the BISO Enablement Unit as an entry-level risk specialist. You will support information security risk management, governance, and advisory activities in coordination with CISP teams.

You will liaise with security and business stakeholders, translate policies into actionable requirements, perform risk assessments, due diligence for vendors, and contribute to policy documentation and regulatory alignment.