Information Security Specialist Colombia

Другое

• The Information Security Area is a strategic, organization-wide function responsible for safeguarding the confidentiality, integrity, and availability of all information assets, systems, and technologies. It establishes, manages, and enforces the comprehensive Information Security Program (ISP), covering risks related to technology, vendors, data handling, and regulatory compliance (including Colombian financial regulations and PCI DSS). The team provides expertise in critical security domains (e.g., Network, Application, TPRM, and Physical Security) and manages incident response. Its core objective is to maintain a secure environment that supports business goals and proactively mitigate internal and external threats.
• Coordinate and support internal and external audits related to local and international regulations, managing resulting remediation plans. Special attention to SFC requirements.
• Lead the information security assessment and continuous monitoring of all third-party service providers, contractors, and vendors.
• Continuously monitor, assess, and ensure organizational adherence to all relevant Colombian Financial Sector Regulations pertaining to information security and data protection (e.g., those issued by the Superintendencia Financiera de Colombia).
• Support the implementation, configuration, and maintenance of technical and administrative security controls as mandated by the Information Security Program (ISP).
• Ensure technical and administrative controls for information security are effective and aligned with local regulations and global policies.
• Generate comprehensive compliance reports for management and regulatory bodies.
• Coordinate the security-related aspects of the Business Continuity Plan (BCP) and Disaster Recovery (DR) efforts, participating in testing and validation.
• Coordinate internal security training and awareness campaigns.
• Support Physical Security activities related to IT assets, data centers, and secure access areas.
• + 6 years of experience as analyst in cybersecurity and/or information security within the Colombian financial sector.
• Proficiency in both Spanish and English (written and verbal).
• Proven experience developing and presenting Information Security compliance reports for new products and channels to the Superintendencia Financiera de Colombia (SFC).
• Experience coordinating internal and external audits of the Information Security Management System (ISMS).
• Ability to simultaneously manage multiple complex compliance and security initiatives.
• Experience acting as a security advisor to Internal IT teams, ensuring operational security alignment.
• Innovative Spirit: A commitment to creativity and groundbreaking solutions.
• Honest Feedback: valuing open, transparent communication.
• Supportive Team:  a strong, collaborative community.
• Celebrating Achievements:  recognizing our wins together.
• High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances.