The Cyber Security Analyst is responsible for supporting, defending and enhancing the company’s cybersecurity posture through the implementation and maintenance of security technologies, incident management and mitigation, compliance frameworks, identity and access management (IAM), and audit readiness. This role ensures alignment with regulatory requirements, internal policies, and industry best practices while proactively identifying and mitigating risks across the enterprise
Responsibilities:
Governance, Compliance & Audit Support - Ensure adherence to regulatory frameworks (e.g., PCI-DSS, NY DFS, GLBA, SOX, DORA, etc.). Support internal and external audits, including vendor and client assessments. Maintain documentation and evidence for compliance activities. Collaborate with Legal, Privacy, Risk, Global Technology and other Cybersecurity teams. Ensure timely and effective cybersecurity education and awareness
Technology & Security Systems Management - Administer and monitor cybersecurity tools and platforms (e.g., SIEM, endpoint protection, vulnerability scanners). Respond to security incidents and alerts. Perform root cause analysis and recommend remediation.
Security Operations – Conduct threat monitoring and analysis via multi-telemetry-based alerts, triage, develop and deliver formal incident reports, and work with technology teams on remediation and improvements.
Identity and Access Management (IAM) - Manage user access provisioning, de-provisioning, and role-based access controls. Ensure compliance with least privilege and segregation of duties principles. Support IAM audits and reviews.
Project Support & Risk Assessment - Participate in security-related projects and initiatives. Conduct risk assessments for new technologies and vendors. Provide input on security, architecture and design.
Reporting & Metrics - Develop and maintain dashboards and reports on security posture, compliance status, project/task status and audit findings. Present findings to leadership and stakeholders.
Requirements:
Advanced english level
Education: Bachelor’s degree preferred; in Computer Science, Information Security, or a related field; or two-year technical certification in Information Systems, Business Management, Computer Science, Engineering, Audit or related.
Experience: Minimum 3 years in IT Security, Compliance, Audit, or IAM roles
Knowledge & Skills:
Strong understanding of cybersecurity frameworks and regulatory requirements
Experience with IAM tools and processes
Familiarity with audit procedures and evidence collection
Proficiency in security technologies (e.g., firewalls, SIEM, endpoint protection)
Excellent communication and documentation abilities - using appropriate level of communication up and down the organization
Works to gain a deep understanding of requests or tasks and offers suggestions to streamline
Build and maintain strong working relationships with sponsors, stakeholders, and team members
Strong problem-solving, critical thinking and troubleshooting skills
Ability to effectively influence others to modify their opinions, plans or behaviors
Effectively work independently and collaboratively in a virtual team environment
Persistent in completing the tasks - on time and within the deadline
Spends time on what adds the most value
Engage the right people at the right time
Bring grit and determination to get things done
Preferred:
Active security certification desired or willingness to obtain
CompTIA Security+
GIAC Security Essentials
Certified Security Analyst (ECSA)
Certified Ethical Hacker (CEH)
Certified Red Team Operator (CRTO)
Offensive Security Certified Professional (OSCP)
Certificated Information Systems Security Professional (CISSP)
Experience in financial services or insurance industries
Knowledge of cloud security and modern IAM solutions
Experience with GRC platforms and risk management methodologies
The offices are located in the Retiro area. If you reside in CABA or the Greater Buenos Aires Area (AMBA), the work arrangement would be hybrid, with one day per week in the office. If you live more than 60 km away, the position would be 100% remote.