ISO Security & Risk Analyst - Hybrid

Popular; Northern (KY); On-site; USD 55,000 - 75,000; Full time

Job summary

Popular seeks an entry-level ISO Security Analyst to support risk management, governance, and advisory activities within the BISO Enablement Unit. You will coordinate with CISP teams and stakeholders to translate policies into actionable requirements, assist with risk assessments, and support vendor due diligence and reporting.

The role emphasizes collaboration, documentation governance, and alignment with frameworks and regulatory expectations, while contributing to risk communications and

Qualifications

• Bachelor’s degree in business administration, computer engineering, computer science, information technology, or related fields.
• Two (2) years of related experience in information technology audit, information security, or vendor management preferred.
• Certifications such as CISA, CISM, and CISSP are preferable.
• Strong business acumen and ability to translate policies into practical requirements.

Responsibilities

• Serve as liaison between assigned business areas and Corporate Information Security & Privacy teams.
• Translate enterprise information security policies into practical, business-aligned requirements.
• Support security awareness and risk culture initiatives with clear communications.
• Perform information security risk assessments for initiatives, apps, products, services, vendors, and AI use cases.
• Conduct third-party vendor information security due diligence, including reviews and contract security.
• Track and report information security risks, remediation plans, and residual risk decisions.
• Prepare vendor due diligence reports and status updates for management oversight.
• Contribute to documentation governance and alignment with frameworks, regulations, and internal governance.
• Assist with documentation and control activities alignment to cybersecurity frameworks and regulatory expectations.

Skills

Business acumen

Technical acumen

Communication skills

Analytical skills

Problem solving

Project management

Regulatory knowledge

AI awareness

Education

Bachelor’s degree in related field

Tools

Power BI

Power Pivot

MS Office 365

Data management

Job description

Popular seeks an entry-level ISO Security Analyst to support risk management, governance, and advisory activities within the BISO Enablement Unit. You will coordinate with CISP teams and stakeholders to translate policies into actionable requirements, assist with risk assessments, and support vendor due diligence and reporting.

The role emphasizes collaboration, documentation governance, and alignment with frameworks and regulatory expectations, while contributing to risk communications and