IT & Cyber Risk Associate

• Support the execution of IT and cyber risk assessments, including participation in RCSAs and control reviews.
• Assist in the identification and monitoring of Key Risk Indicators (KRIs) related to cybersecurity and technology risks.
• Contribute to the monitoring and follow-up of security incidents, including documentation and root cause analysis.
• Collaborate with key stakeholders to ensure controls are properly designed and operating effectively.
• Support third-party risk assessments, particularly for technology providers and outsourced services.
• Help ensure alignment with relevant regulations and standards (e.g., PCI-DSS, ISO 27001, PSD2).

• Understanding of IT and cybersecurity risk concepts (e.g., access management, network security, data protection).
• Familiarity with common frameworks and standards (e.g., ISO 27001, NIST).
• Analytical skills with ability to work with data.
• Understanding of core payment systems and technology environments.
• Strong documentation skills and attention to detail in risk reporting and tracking.

Other relevan information

Fluent in both English and Spanish is a must for this position due to interactions with key stakeholders.