ISO Security Analyst - Hybrid: Risk & Compliance

Popular Bank; Silverton (CO); Hybrid; USD 42,000 - 65,000; Full time

Job summary

Popular Bank in San Juan, PR, is seeking an entry-level ISO Security Analyst to assist in information security risk management, governance, and advisory activities. You will work with CISP teams, business stakeholders, and control functions to translate policies into practical requirements and support risk culture initiatives.

The role involves coordinating risk assessments, third-party due diligence, and documentation governance while aligning with regulatory expectations.

Qualifications

• Bachelor's degree in business administration, Computer Engineering, Computer Science, Information Technology, or related fields.
• Certifications such as CISA, CISM, and CISSP are preferable.

Responsibilities

• Serve as a liaison between business areas and Corporate Information Security & Privacy teams for security requests, requirements, and risk-related matters.
• Translate enterprise information security policies into practical, business-aligned requirements and advisory guidance.
• Support security awareness and risk culture initiatives by communicating information security expectations to business stakeholders.
• Perform information security risk assessments for initiatives, applications, products, services, vendors, and AI use cases, as applicable.
• Perform third-party vendor information security due diligence activities, including ongoing vendor reviews and contract security reviews.
• Track, report, and follow-up information security risks and remediation plans identified through vendor due diligence assessments.
• Prepare ongoing vendor information security due diligence reports and status updates for management oversight.
• Contribute to documentation governance, including inventory, review, and lifecycle management of information security policies and related repositories.
• Assist with aligning documentation and control activities to cybersecurity frameworks and regulatory expectations.

Skills

Business acumen

Technical acumen

Communication skills

Analytical skills

Problem solving

Project management

Regulatory knowledge

MS Office 365

AI awareness

Education

Bachelor's degree

Tools

Power BI

Power Pivot

MS Office 365

Job description

Popular Bank in San Juan, PR, is seeking an entry-level ISO Security Analyst to assist in information security risk management, governance, and advisory activities. You will work with CISP teams, business stakeholders, and control functions to translate policies into practical requirements and support risk culture initiatives.

The role involves coordinating risk assessments, third-party due diligence, and documentation governance while aligning with regulatory expectations.