ISO Security Analyst: Risk & Vendor Oversight (Hybrid)

San Juan (PR)

Hybrid

USD 42,000 - 62,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Hybrid work environment

Job summary

Popular is seeking an ISO Security Analyst to support the BISO Enablement Unit in San Juan. The role focuses on risk management, governance, and advisory activities across security controls, coordinating with CISP teams and business stakeholders.

You will help translate policies into actionable requirements and aid in vendor due diligence and risk reporting. The position is hybrid, with emphasis on collaboration across security functions and business units.

Qualifications

Bachelor’s degree in business, computer engineering, computer science, information technology, or related field.
Two years of related experience in information security, audit, or vendor management is preferred.
Experience with data management tools and BI platforms is preferred.

Responsibilities

Serve as liaison between business areas and Corporate Information Security & Privacy teams for security requests and risk-related matters.
Translate security policies into practical, business-aligned requirements and advisory guidance.
Support security awareness and risk culture initiatives by communicating risks to stakeholders.
Perform information security risk assessments for various initiatives, including AI use cases.
Conduct third-party vendor information security due diligence and follow up on identified risks.
Track and report information security risks and remediation efforts.