Info Security Governance Analyst (Cybersecurity)

Location: San Salvador, El Salvador

Company

Leading provider of professional services for middle-market clients, supporting organizations and people through an inclusive professional services environment.

What you will do

• Plan and coordinate information security audits with auditors and control owners.
• Gather and evaluate audit evidence, conduct mock audits and control reviews, drive remediation, and report risks to leadership.
• Assess the security posture of vendors and third parties, prepare assessment reports, and communicate risks to business contacts.
• Respond to client security questionnaires, requests for proposals, and requests for information.
• Maintain information security policies, standards, procedures, and related program documentation.
• Manage phishing tests and security awareness content, including reporting and escalating overdue activities.

Requirements

• Bachelor’s degree in cybersecurity, information systems, or a related field, or equivalent experience.
• At least 2 years of information security experience.
• At least 1 year of experience performing vendor security assessments or vendor due diligence.
• Solid understanding of security across operating systems, applications, networks, cloud, and mobile environments.
• Critical and structured thinking, formal analytical methods, strong organization, and the ability to manage multiple priorities independently.
• Excellent written and oral communication skills.

Nice to have

• Experience responding to client due diligence inquiries.
• Ability to translate technical terms into language accessible to non-technical audiences.

Culture & Benefits

• Inclusive culture focused on professional growth and personal development.
• Flexible scheduling to help balance personal and client-service responsibilities.
• Competitive benefits and compensation package.
• Equal opportunity and reasonable accommodation are available throughout the employment and recruitment process.