Cyber Security Analyst

Overview

The Cyber Security Analyst will support the execution and continuous evolution of the organization’s enterprise cybersecurity strategy across Information Technology (IT) and Operational Technology (OT) environments, ensuring protection of critical assets, operational resilience, and alignment with defined business objectives, risk appetite, and internationally recognized cybersecurity standards.

Responsibilities

Key Responsibilities

• Support and drive the implementation and operationalization of the enterprise cybersecurity strategy for IT and OT environments, ensuring alignment with established business priorities and corporate risk management objectives.
• Establish, maintain, and mature the cybersecurity governance model, including policies, standards, guidelines, and control frameworks for IT and OT.
• Oversee Privileged Access Management (PAM) strategy and governance, ensuring secure and effective use of platforms such as CyberArk.
• Drive OT security capabilities, including asset visibility, threat detection, and risk management through solutions such as Claroty.
• Coordinate cybersecurity risk assessments, posture evaluations, and remediation roadmaps across hybrid IT/OT environments.
• Lead and monitor strategic cybersecurity initiatives and programs, ensuring execution in line with approved plans and timelines.
• Act as a trusted advisor to executive leadership, translating cybersecurity risks and initiatives into clear business impact and decision support.
• Promote a strong cybersecurity culture and awareness across technical, operational, and corporate teams.

Qualifications

Requirements

Education

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
• Master’s degree in Cybersecurity, Information Security, Risk Management, or similar (preferred).

Experience

• 7–10 years of progressive experience in cybersecurity or information security.
• Proven experience securing both IT and OT environments (industrial, critical infrastructure, or operational contexts).
• Demonstrated experience leading teams, programs, or enterprise‑level security initiatives.

Technical Knowledge

• Cybersecurity frameworks and standards: ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls.
• IT/OT security architecture and risk management.
• CyberArk: Privileged Access Management, vaults, governance, and controls.
• Claroty or equivalent OT security platforms (asset visibility, monitoring, risk reduction).
• Incident response, security architecture, and risk‑based decision‑making.

Languages

• English: Native or fluent.
• Spanish: Advanced (able to lead technical and executive‑level discussions with global stakeholders).

Desired Certifications

• CISSP, CISM, CRISC.
• OT / Industrial cybersecurity certifications or CyberArk‑related certifications (preferred).

Core Competencies

• Strategic leadership and influence
• Business‑oriented risk mindset
• Executive‑level communication
• Analytical thinking and decision‑making
• Cross‑functional and multidisciplinary collaboration