Cyber Security Analyst

IS Audit Management COE COL

Colombia - Medellin

Responsabilidades Generales

• Assist in maintaining and updating security policies, compliance documentation, and GRC tooling.
• Support internal and external audit preparation and evidence collection.
• Coordinate with teams across the organization to ensure compliance tasks are completed on time.
• Participate in vendor risk assessments and ensure third-party compliance documentation is up to date.
• Identify areas for process improvement in compliance workflows and documentation 

Educación y Experiencia Requerida

• Bachelor's degree (B. A.) in cybersecurity, information systems or related fields.
• One (1) to three (3) years of experience in GRC, information security, or a compliance-related role.
• No certificates or licenses needed but CISA, CISM, CRISC or CISSP certifications are a plus.
• Familiarity with compliance frameworks such as ISO, NIST, CIS, SOC 1, SOC 2, PCI DSS.
• Experience using GRC platforms (AuditBoard or similar tools preferred).
• Technical skills: Excel, Word, PowerPoint, GRC tools, quick learner of new technologies in general.

#LI-DNI 

Conocimiento y Destrezas Requeridas

• Strong attention to detail and organizational skills.
• Strong written and verbal skills in English and Spanish, including a demonstrated ability to translate complex or technical information into concepts that are easily understood and actionable.
• Ability to work independently and prioritize in a remote, fast-paced environment.
• Collaborative mindset and eagerness to learn and grow in the compliance and security field.
• Knowledge of fundamental security/ IT concepts (e.g., retention, data classification, access control, third party risk).
• Demonstrated critical thinking skills, but also able to follow instructions to meet the team's overall objective.
• Good attitude and courtesy to work with a smaller, fast-paced team.
• Able to operate with a high degree of independence executing with excellent follow-through for assigned tasks, but also knowing when to stop, ask questions, and seek input from the team or management.
• Not afraid to roll your sleeves up, learn what's needed to learn, get done what needs to get done.
• Reliability, discretion, and confidentiality. 

Información Adicional

Lunes a Jueves de 8am a 6pm, Viernes de 8am a 5pm

Evertec Group, LLC es un Patrono con Igualdad de Oportunidades de Empleo