Risk Analyst

📋 Description

• PCI-DSS compliance: liaison with external auditors; gather and present audit evidence.
• Vulnerability & Risk management: identify vulnerabilities, drive remediation, track risk by threat.
• Technical asset & access analysis: inventories, keys, certs, privileged access, assets.
• Cross-functional collaboration: work with tech teams and vendors to monitor security & remediation.
• Governance & documentation: draft policies, standards, risk notes, audit-ready docs.

🎯 Requirements

• PCI-DSS audit management with external auditors.
• Deep PCI-DSS tech knowledge: key management, segmentation, access, logging.
• Knowledge of DORA requirements for financial institutions.
• Vulnerability management methodologies and remediation lifecycles.
• Analytical, autonomous, and proactive in audit/risk contexts.
• Core security tooling: SIEM/EDR, PAM, vulnerability scanners, cert/tools.

🎁 Benefits

• Professional development and talent monitoring.
• Commitment to employee growth and development.
• Growth-oriented, collaborative culture.
• Flexible, integrity-driven work environment.