Analista de Seguridad de Información

About the role

The Information Security Analyst will lead the bank's information security management, ensuring compliance with international regulations and standards while preventing and responding to security incidents.

Key responsibilities

• Administer the bank's information security management system.
• Support design, analysis, testing and verification of security projects.
• Assist business areas in aligning projects and processes with security policies and risk appetite.
• Investigate, propose and manage best‑practice security measures to protect confidentiality, integrity and availability of data.
• Handle security events and incidents, including cybersecurity incidents, in coordination with relevant departments.
• Ensure compliance with applicable regulations through security solutions.
• Conduct periodic security diagnostics of IT assets.
• Implement security tools that safeguard information.
• Promote a security‑aware culture through training and communication.
• Maintain information security risk management according to the bank’s methodology.
• Address audit findings by implementing controls and improvements.
• Prepare reports and presentations for senior management and governance bodies.
• Support process owners in managing information assets, classification and inventory.

Required profile

• Bachelor’s degree in Systems Engineering or Information Technology.
• At least 3 years of experience in information security management or implementation.
• Current ISO 27001 certification.
• Technical proficiency in English.

Required skills

• Knowledge of ISO 27001, PCI DSS, NIST frameworks (including NIST CSF).
• Familiarity with CIS Controls and OWASP.
• Experience with data classification, information risk management and business continuity.
• Ability to administer and monitor databases.
• Technical risk management for networks, servers, operating systems and cloud services.
• Proficiency with security tools and technologies.