Назад
Company hidden
3 дня назад

Information Security Analyst

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Argentina
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Security Analyst (GRC/PCI DSS): Supporting information security governance, risk, compliance, vulnerability remediation, audits, and third-party security assessments with an accent on PCI DSS, control frameworks, risk registers, and security metrics. Focus on tracking findings and remediation evidence, coordinating audits and control owners, and improving security governance across applications, vendors, data protection, and cyber resilience.

Location: Argentina; Buenos Aires, Argentina

Company

hirify.global is an ultra-luxury hospitality business at sea operating under the Ritz-Carlton brand.

What you will do

  • Support information security governance, risk, compliance, policies, standards, procedures, controls, inventories, and risk registers.
  • Track security risks, vulnerabilities, audit and penetration-test findings, remediation plans, exceptions, owners, deadlines, and closure evidence.
  • Support PCI DSS activities, internal and external audits, security control assessments, evidence collection, and coordination with control owners and assessors.
  • Support third-party security risk management, application and asset governance, data protection governance, and coordination with Legal, Privacy, technical teams, and security partners.
  • Support security awareness, role-based training, phishing simulations, incident response documentation, cyber resilience, business continuity, and disaster recovery exercises.
  • Develop security metrics, KPIs/KRIs, dashboards, management reporting, and process improvements across vulnerabilities, incidents, compliance, awareness, third-party risk, and remediation.

Requirements

  • 2+ years of experience in Information Security, Cybersecurity, GRC, IT Risk, IT Audit, Compliance, or a related field.
  • Experience with security governance, risk assessments, audits, compliance, or security control frameworks.
  • Familiarity with NIST, CIS Controls, ISO 27001, and/or PCI DSS.
  • Experience tracking risks, findings, remediation activities, evidence, exceptions, and control requirements.
  • General understanding of vulnerability management, IAM, cloud security, data protection, incident response, endpoint security, and security monitoring.
  • Strong analytical, organizational, and problem-solving skills.
  • Ability to manage multiple findings, owners, deadlines, and priorities simultaneously.

Nice to have

  • Experience supporting PCI DSS compliance or other regulatory and security compliance programs.
  • Experience with third-party security risk or vendor security assessments.
  • Experience working with internal or external auditors and coordinating evidence.
  • Security certifications such as Security+, CISA, CRISC, CISM, or similar.

Culture & Benefits

  • Full-time employment within an inclusive, equal-opportunity hospitality organization.
  • Work culture emphasizes trust, honesty, respect, integrity, commitment, quality of life, and professional development.
  • Applicants are considered on the basis of merit, competence, and qualifications without discrimination based on protected characteristics.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →