Information Security Analyst I

● STEM engineering or technological degrees.

● Minimum of 3 years of experience in the field of identity and information security.

● Knowledge of specific cybersecurity and data protection regulations such as DORA, NIS2, GDPR, CCPA, etc.

● We need a person with initiative and a positive attitude, with a great desire to learn and evolve their capabilities.

● Good empathy, interpersonal relations, and communication skills.

● Negotiation and conflict resolution capacity.

● Adaptability and openness to experience.

● Proactivity and initiative to detect opportunities for process improvement and user experience enhancement.

● Critical thinking and lateral thinking, with the capacity for abstraction and the search for innovative alternatives.

● Data-driven decision-making capacity.

Client Orientation, Empathy, Ethics, Innovation, Proactive Thinking

● Valuable knowledge of security standards and risk management: ISO 27001, SOC2.

● Valuable master's degree in cybersecurity / security management certifications (CISM, CISSP, or similar).

● English at a professional level (B2-C1)

Excited to grow your career?

Learn more about the area:

We are looking for a person to take on the role of Area Profiling Manager , joining the Corporate Security Holding team to ensure good governance of application profiling.

Your function will be to guarantee the good governance of the identity of all users and applications under the scope of responsibility of Corporate Security Holding, ensuring that applications comply with mandatory policies and standards regarding identity, ensuring least privilege, segregation of duties, identification of incompatibilities, and other general principles reflected in the Group's Identity strategy.

● They will ensure that areas have the necessary knowledge for the identity management of their users (internal, external, and impersonal), for the correct implementation of least privilege and segregation of duties in access management.

● E2E knowledge of the user management process.

● They promote the generation and maintenance of the internal regulations necessary for the development of the activity, guaranteeing compliance.

● They define, maintain, and certify the functional authorization matrix for the applications within their perimeter, as well as the segregation of duties matrix.

● 2nd level approver for access requests or individual requests (medium risk, high risk, or technical users).

● They follow up on generated reports, evaluate the quality of the information under their scope of responsibility, and establish action plans to correct identified deficiencies and promote opportunities for improvement.

● They escalate risks to the corresponding working groups of the area when detected.

● They know the KRIs and KPIs of their scope of action to act accordingly.

● They participate in the UAM/Identity Governance Working Groups or similar to guarantee the adoption of corporate identity management models.

● Ensure regulatory compliance and the execution of remediation plans for audits or weaknesses detected in their assets.

● Foster a security culture throughout the unit.