Senior Cybersecurity Audit Analyst

Description

Position Summary: Credicorp Capital is seeking a Senior Cybersecurity Audit Analyst to conduct robust technical audits and challenge the group's security posture. Key Highlights: 1. Challenge the security posture of suppliers and internal platforms. 2. Evaluate network architectures and identify design vulnerabilities. 3. Draft high-impact observations and propose recommendations. **Credicorp Capital** invites you to Turn Challenges into Opportunities and become our next **Senior Cybersecurity Audit Analyst**, whose primary challenge will be to execute robust technical audits on governance, risk management, and operational effectiveness of security controls at Credicorp Capital Regional. Your role will not only involve evaluation but also challenging the security posture of our critical suppliers and internal platforms, ensuring the group’s technological resilience. **Your key challenges will include:** * Reviewing internal or external regulations related to information security, cybersecurity, and IT security processes to be audited, as well as applicable best practices. * Rigorously evaluating network architectures (segmentation, microsegmentation, routing protocols, and layer-based security) to identify design vulnerabilities in hybrid environments (on-premise and cloud). * Validating hardening of critical assets (servers, databases, firewalls, IPS/IDS) against international standards (CIS Benchmarks, NIST CSF 2\.0\). * Auditing cloud architectures, focusing on identity management (IAM), storage/bucket security, and compliance with cloud security policies. * Designing and executing audit procedures—including technical walkthrough tests—to validate that controls not only exist but are resilient against evasion attempts. * Drafting high-impact observations that link technical weaknesses to business risks, proposing recommendations to elevate regional cybersecurity maturity. **If you meet the following profile, this opportunity is for you:** * Degree in Systems Engineering, Electronic Engineering, or related field. * Minimum 5 years of specific experience in information security, cybersecurity, or technical auditing. We seek someone who has served in "first-line or second-line" technical roles (SOC, Networks, Cyber Defense, SI) prior to transitioning into auditing. **Essential Technical Expertise:** * Solid knowledge of networking (OSI model, TCP/IP, firewalls, VPNs, DNS/ARP name resolution protocols). * Proficiency in NIST CSF 2\.0 and management frameworks (ISO 27001, ISO 31000\). * Ability to audit Active Directory and virtualized environments. * Mandatory certifications: ISO 27001 Internal Auditor/Lead Auditor. * Desirable technical certifications (we value "hands-on" experience): + CCNA or equivalent networking knowledge. + Cybersecurity: CEH (Ethical Hacker), CompTIA Security\+, or CSFPC. + Business Continuity: ISO 22301 (Internal Auditor).