ISO Security Specialist

Popular; San Juan (PR); On-site; USD 70,000 - 100,000; Full time

Job summary

Popular is seeking an ISO Security Specialist in San Juan, Puerto Rico, to provide technical support in Cyber and Information Security Incident Response in the banking industry. Candidates should possess a Bachelor's degree in Cybersecurity or related fields and have at least three years of experience in a complex tech environment.

The role requires strong analytical skills, proficiency in Microsoft 365, and the ability to communicate effectively. The position is not open to visa sponsorship.

Qualifications

• 3+ years of cyber security experience in complex technology environments.
• Familiar with local and federal cybersecurity laws and regulations.
• Strong communication skills for presenting data and reports.

Responsibilities

• Manage security investigations through the entire incident lifecycle.
• Triage and analyze new incoming issues to determine the level of risk.
• Prepare documentation, metrics, and reports related to security incidents.

Skills

Risk assessment

Incident response management

Cybersecurity knowledge

Technical communication

Analytical skills

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field

Tools

Power BI

Microsoft 365

Job description

ISO Security Specialist

Provide technical support on Cyber and Information Security Incident Response in the banking industry with knowledge and understanding of best practices in security risk framework, business strategy, regulatory and federal compliance requirements. Support risk and security assessments of network configurations, log activity, applications, systems, and vendor management security controls and measures. Able to establish cyber recommendations based on industry standards and best practices which mitigate/remediate risks, threats, and vulnerabilities when identified and propose methodologies to eliminate/minimize impact.

Essential Duties and Responsibilities

• Ability to manage security investigations through the entire incident lifecycle based on our Incident Response Plan/Procedures (IRP)
• Manage low/low to medium incident response process, from detection, response and post-incident report and actions.
• Discuss and follow up action plans with customers, service providers, and/or employees to address recommendations from internal processes.
• Triage and analyze new incoming issues to determine the level of risk and rate severity according to our Incident Response Plan
• Prepare documentation, metrics and reports related to security incidents and assessments.
• Support the implementation of changes to the Incident Response Plan and procedures.
• Collaborate with senior team members to develop and implement mitigation strategies.
• Escalate issues with efficiency and support documentation.
• Chronologically, track and organize evidence; experience reviewing logs data and illustrating findings.
• Support other duties and responsibilities as assigned, familiar with applicable local and federal laws, regulations, and guidelines

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field

Experience

Three (3) years of cyber security and cloud related experience in a complex technology environment.

Certifications / Licenses

Certifications and Licenses are preferred but not required.

• Security+
• TryHackMe Security Analyst Level 1 (SAL1)
• Practical SOC Analyst SOC professional (TCM)

Knowledge, Skills and Abilities

• Business and stakeholder management: Strong business acumen with the ability to understand stakeholder needs, respond effectively, analyze work procedures and business results, and recommend improvements that strengthen management effectiveness.
• Technical and regulatory knowledge: Solid understanding of Cybersecurity, Information Security, and Information Technology concepts. Including SIEM and EDR knowledge, skills in static and dynamic analysis, basic threat hunting knowledge, With the ability to write technical instructions and apply relevant local and federal laws, regulations, and guidelines.
• Communication and reporting: Strong written, verbal, and interpersonal communication skills, with the ability to build trust, present ideas and data clearly, and prepare effective presentations, summaries, and reports for varied audiences.
• Analytical and problem-solving skills: Ability to stay focused on priorities, synthesize complex information, apply sound judgment, identify and resolve problems promptly, and develop practical, creative solutions with strong attention to detail.
• Incident and operational management: Ability to prioritize and manage multiple incidents and tasks with minimal supervision, shift between strategic and tactical work, meet deadlines, and maintain quality while following organizational policies and operational processes.
• Computer and data skills: Proficiency in Microsoft 365 and familiarity with data management and reporting tools such as Power BI, with the ability to use technology in innovative and operationally effective ways.

Important

The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Visa & Eligibility

Applicants must be authorized to work for any employer in the United States. This position is not open to applicants who need visa sponsorship or transfer of visa sponsorship at this time.