Iso Security Specialist

Date: May 28, ****
Location:

San Juan, PR

Company: Popular
Workplace Type: Hybrid
ISO Security Specialist

General Description

Provide technical support on Cyber and Information Security Incident Response in the banking industry with knowledge and understanding of best practices in security risk framework, business strategy, regulatory and federal compliance requirements. Support risk and security assessments of network configurations, log activity, applications, systems, and vendor management security controls and measures. Able to establish cyber recommendations based on industry standards and best practices which mitigate/remediate risks, threats, and vulnerabilities when identified and propose methodologies to eliminate/minimize impact.

Essential Duties and Responsibilities

Ability to manage security investigations through the entire incident lifecycle based on our Incident Response Plan/Procedures (IRP)
Manage low/low to medium incident response process, from detection, response and post-incident report and actions.
Discuss and follow up action plans with customers, service providers, and/or employees to address recommendations from internal processes.
Triage and analyze new incoming issues to determine the level of risk and rate severity according to our Incident Response Plan
Prepare documentation, metrics and reports related to security incidents and assessments.
Support the implementation of changes to the Incident Response Plan and procedures.
Collaborate with senior team members to develop and implement mitigation strategies.
Escalate issues with efficiency and support documentation.
Chronologically, track and organize evidence; experience reviewing logs data and illustrating findings.
Support other duties and responsibilities as assigned, familiar with applicable local and federal laws, regulations, and guidelines

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Experience

Three (3) years of cyber security and cloud related experience in a complex technology environment.

Certifications / Licenses

Certifications and Licenses are preferred but not required.

Security+
GCIH – Certified Incident Handler
TryHackMe Security Analyst Level 1 (SAL1)
Practical SOC Analyst SOC professional (TCM)

Knowledge, Skills and Abilities

Business and stakeholder management: Strong business acumen with the ability to understand stakeholder needs, respond effectively, analyze work procedures and business results, and recommend improvements that strengthen management effectiveness.
Technical and regulatory knowledge: Solid understanding of Cybersecurity, Information Security, and Information Technology concepts. Including SIEM and EDR knowledge, skills in static and dynamic analysis, basic threat hunting knowledge, With the ability to write technical instructions and apply relevant local and federal laws, regulations, and guidelines.
Communication and reporting: Strong written, verbal, and interpersonal communication skills, with the ability to build trust, present ideas and data clearly, and prepare effective presentations, summaries, and reports for varied audiences.
Analytical and problem-solving skills: Ability to stay focused on priorities, synthesize complex information, apply sound judgment, identify and resolve problems promptly, and develop practical, creative solutions with strong attention to detail.
Incident and operational management: Ability to prioritize and manage multiple incidents and tasks with minimal supervision, shift between strategic and tactical work, meet deadlines, and maintain quality while following organizational policies and operational processes.
Computer and data skills: Proficiency in Microsoft 365 and familiarity with data management and reporting tools such as Power BI, with the ability to use technology in innovative and operationally effective ways.

Region Locations

Puerto Rico

Additional Requirements

The information provided here is only a general guide as to the nature of the position and does not constitute an exact description of the goals, tasks, duties, and responsibilities of the position. The specific details of each position are described in the employee's objectives within the performance evaluation.

Important: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Our hybrid work model benefit applies to certain positions and is subject to changes based on the organizational needs.

Applicants must be authorized to work for any employer in the United States. This position is not open to applicants who need visa sponsorship or transfer of visa sponsorship at this time.

ABOUT US

Popular is Puerto Rico's leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.

As employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.

We reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular's employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.

If you have a disability or need more information about requesting an accommodation, please contact us at ******. This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.

Are you ready for a rewarding career?