Information Security Analyst

The Ritz-Carlton Yacht Collection

. Support Information Security governance, risk, and compliance activities .

Posted 11/9/2026full-timeBuenos Aires • ArgentinaJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security governance, risk management, and compliance activities, with a strong focus on PCI DSS compliance, security assessments, and vulnerability management. Proficient in developing security metrics and coordinating with internal and external stakeholders to ensure effective risk remediation and compliance.

Highest-signal resume keywords

Information Security GovernanceRisk AssessmentsPCI DSS ComplianceVulnerability ManagementSecurity Control Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk TrackingSecurity AuditsControl ValidationIncident ResponseData Protection GovernanceSecurity Metrics DevelopmentVulnerability ManagementSecurity MonitoringCloud SecurityIAM

Soft Skills

Analytical SkillsOrganizational SkillsProblem-Solving SkillsMultitasking AbilityCommunication Skills

Certifications & Qualifications

Security+CISACRISCCISM

Industry Keywords

GRCNISTCIS ControlsISO 27001Compliance ProgramsThird-Party Security RiskVendor Security AssessmentsCyber ResilienceBusiness ContinuityDisaster Recovery

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Support Information Security governance, risk, and compliance activities
Assist with security risk assessments and maintain risks, remediation plans, exceptions, owners, target dates, and closure evidence
Track security findings from vulnerability assessments, penetration tests, audits, PCI assessments, security reviews, application testing, and other sources through remediation and closure
Support PCI DSS compliance activities, including remediation tracking, evidence collection, control validation, role-based security training requirements, and coordination with internal teams and external assessors
Support internal and external audits and security assessments by coordinating evidence requests and working with control owners
Assist with maintaining and improving Information Security policies, standards, procedures, controls, and supporting documentation
Support security control assessments and identify gaps between current practices and security requirements
Support third-party security risk management, including vendor assessments, security reviews, remediation commitments, exceptions, and ongoing tracking
Support security awareness and training activities, including role-based training, phishing and social-engineering awareness, simulation results, remedial training, completion tracking, and effectiveness metrics
Support application and asset governance, data protection governance, vulnerability management governance, and incident response documentation
Coordinate with Legal and Privacy regarding security risks, incidents, applications, or third parties involving personal or regulated data
Develop and maintain security metrics, KPIs/KRIs, dashboards, and management reporting
Work with managed security partners and internal teams to track security issues and ensure follow-up and closure
Maintain security inventories, risk registers, compliance documentation, control evidence, and supporting records
Support cyber resilience, business continuity, disaster recovery, and security-related recovery exercises from a risk and governance perspective
Evaluate security and compliance risks associated with new technologies, applications, vendors, cloud services, and emerging technologies
Improve security processes, reporting, documentation, and governance
Participate in Information Security projects and initiatives as the security program matures

Requirements

What you’ll need

2+ years of experience in Information Security, Cybersecurity, GRC, IT Risk, IT Audit, Compliance, or a related field
Experience with security governance, risk assessments, audits, compliance, or security control frameworks
Familiarity with NIST, CIS Controls, ISO 27001, and/or PCI DSS
Experience tracking risks, findings, remediation activities, evidence, exceptions, and control requirements
General understanding of vulnerability management, IAM, cloud security, data protection, incident response, endpoint security, and security monitoring
Experience supporting PCI DSS compliance or other regulatory/security compliance programs is strongly preferred
Experience with third-party security risk or vendor security assessments is a plus
Experience working with internal or external auditors and coordinating evidence is a plus
Strong analytical, organizational, and problem-solving skills
Ability to manage multiple findings, owners, deadlines, and priorities simultaneously
Security certifications such as Security+, CISA, CRISC, CISM, or similar are a plus

Benefits

Comp & perks

Equal opportunity, inclusive employer
Employee culture based on trust, honesty, respect, integrity, and commitment
Quality of life enhancement and support for individual aspirations