ISO Security Analyst – Entry Level

About the role

As an entry‑level member of the Business Information Security Office (BISO) Enablement Unit, you will support information‑security risk management, governance and advisory activities for Popular’s business units. The role works closely with corporate security, privacy teams and business stakeholders to translate security policies into practical requirements.

Key responsibilities

• Serve as liaison between business units and Corporate Information Security & Privacy teams for security requests, requirements and risk matters.
• Assist business units in applying enterprise security policies, standards and guidelines to real‑world initiatives.
• Perform information‑security risk assessments for projects, applications, vendors and emerging technologies such as AI.
• Conduct third‑party vendor security due‑diligence, ongoing reviews and contract security assessments.
• Track, report and follow‑up on security risks, remediation plans, exceptions and residual risk decisions.

Required profile

• Bachelor’s degree in Business Administration, Computer Engineering, Computer Science, Information Technology or related field.
• At least two years of experience in IT audit, information security or vendor management (preferred).
• Relevant certifications such as CISA, CISM or CISSP are a plus.

Required skills

• Proficiency with Microsoft Office 365.
• Experience using data‑management tools such as Power Pivot and Power BI.
• Basic knowledge of artificial‑intelligence technologies.
• Understanding of computer flow‑charts, programming logic and code concepts.