IT Security Support Specialist - Corp. Access Management - Firstbank Pr

FirstBank Puerto Rico • San Juan, PR

1d

About The Position

The IT Security Support Specialist is a dedicated regional resource within the Corporate Security Office (CSO), which is responsible for the corporate Information Security strategy, policies, procedures, and programs. The specialist supports the Unit Manager in achieving regional information security goals and objectives, identifying and mitigating information security risks, and responding to cybersecurity risks. The role includes employee onboarding and access administration, security monitoring, control reviews, and support for compliance and continuity requirements.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, or a related field, and at least three years of experience in a similar job; or an equivalent combination of education and experience sufficient to perform the essential job functions.
• Previous experience with information technology and information security regulations and guidelines, including SOX, GLBA, BSA, FFIEC Guidelines, and PCI DSS.
• Experience in the information security field.
• Proficient IT skills, business knowledge, and people skills, with the ability to interact effectively at all levels.
• Proficient knowledge of Information Security and/or Information Technology.
• Knowledge of Information Security frameworks such as COBIT 5, ISO 27000, and NIST.
• Strong knowledge of IT controls and how to comply with control objectives.
• Ability to utilize, operate, and care for computers and related electronic data processing equipment, and to manage computers and related hardware devices.
• Willingness to learn new technologies and keep up with current industry technologies and standards.

Nice To Haves

• Security+, SSCP, or CISM certification.

Responsibilities

• Process regional access provisioning requests and ensure Access Request Forms from Human Resources and business units are handled appropriately.
• Review user access and ensure roles and definitions align with approved Access Request Forms and employees’ job functions.
• File, scan, and maintain user access request documentation.
• Maintain satisfactory service-level agreement metrics within ticketing systems.
• Monitor timely deactivation of terminated and transferred employees in Active Directory and applicable applications.
• Provide Tier 2 Help Desk support, including after regular working hours as part of a scheduled program.
• Configure system security policies to meet security standards or user requirements.
• Support the Unit Manager with information security monitoring metrics, including KRIs, scorecards, and dashboards.
• Assist with detecting risks as part of an early warning system and communicate underlying risks and potential business impacts.
• Help provide a backward-looking view of risk events so lessons can be learned.
• Support preparation and maintenance of information security self-assessments to identify potential risks.
• Support special projects and research related to Corporate Security as needed.
• Review IT Security Controls and support follow-ups and effective monitoring processes.
• Assist the Unit Manager in responding to and mitigating cybersecurity risks to improve internal controls.
• Recommend business requirements, practices, and compliance measures that support the Corporation’s Information Security strategy, regulatory compliance, and continuity requirements.
• Perform other related functions as needed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level