INFORMATION SECURITY SPECIALIST

Description

Job Summary: We are seeking an Information Security Specialist responsible for protecting information assets by managing risks, identities, access, and regulatory compliance. Key Highlights: 1. Part of a leading automotive financing company 2. Work in a team that values innovation and diversity 3. Actively participate in information security management **Want to advance your professional career?** BBVA is a global company with over 160 years of history, operating in more than 25 countries, serving over 80 million customers. We are more than 121\.000 professionals working in multidisciplinary teams with diverse profiles including finance specialists, legal experts, data scientists, developers, engineers, and designers. **We have a new opportunity for you!** What are we looking for? Forum Servicios Financieros, part of the BBVA Group, invites you to join its outstanding team! If you wish to be part of a market-recognized company with challenging projects, this opportunity is for you! We stand out as a leader in automotive financing, with over 29 years in the market delivering top-tier products. We believe in innovation, diversity, and inclusion—but above all, we value committed, resourceful, proactive, and cheerful individuals. We’re waiting for you! We are seeking an Information Security Specialist responsible for contributing to the protection of the organization’s information assets through the implementation, monitoring, and continuous improvement of security controls, policies, and processes. The role will actively participate in security risk, identity and access, regulatory compliance, audit, data protection, third-party security, and security awareness program management—acting as the technical reference point for matters under their responsibility. Key Responsibilities: * Manage, implement, and monitor Information Security controls, identifying improvement opportunities and coordinating action plans. * Participate in the identification, assessment, and treatment of security risks, tracking findings and mitigation plans. * Manage initiatives related to identity and access, regulatory compliance, audits, and protection of information assets. * Develop and maintain Information Security policies, procedures, standards, and awareness activities. * Participate in and technically lead projects and initiatives related to data protection and third-party security management. * Coordinate cross-functionally with Technology, Engineering, Risk, Compliance, Audit, and business units. Required Profile: * Professional degree in Computer Engineering, Computer Science, Systems Engineering, Information Security, or related fields. * Minimum 4 years of experience in Information Security or Cybersecurity. * Knowledge of risk management, security controls, compliance, auditing, and identity and access management. * Familiarity with frameworks and standards such as ISO/IEC 27001 and NIST Cybersecurity Framework. * Desired knowledge of technologies such as DLP, vulnerability management, SIEM, IAM, and endpoint protection. * Experience in highly regulated organizations—particularly in the financial sector—is valued. * Desired specialization, postgraduate diploma, or certifications related to Information Security, Cybersecurity, Risk, Auditing, or Business Continuity. *If you enjoy challenges and being part of a major company, don’t hesitate to apply.*