Associate Cybersecurity Analyst, Bilingual

About the Role

The Associate Cybersecurity Analyst supports cybersecurity policy governance and regulatory compliance activities across multiple international authorities. This entry-level to early-career role assists in monitoring regulatory developments, conducting research and analysis, maintaining policy documentation, and supporting compliance initiatives. The Associate Cybersecurity Analyst works closely with Cybersecurity, Legal, Compliance, Privacy, Risk Management, Technology, and business stakeholders to help maintain alignment between cybersecurity policies, standards, and applicable regulatory requirements.

This position requires professional fluency in both English and Spanish to support global regulatory monitoring activities, communicate compliance requirements, and collaborate with stakeholders across diverse regions.

Key Responsibilities

Cybersecurity Policy Governance

• Support cybersecurity policy governance activities to help maintain alignment with regulatory requirements, legal obligations, organizational objectives, and industry frameworks.
• Assist with the full policy lifecycle, including development, review, approval, publication, communication, implementation, and periodic recertification.
• Coordinate policy reviews and stakeholder engagement across Cybersecurity, Legal, Compliance, Privacy, Risk Management, Technology, and business teams.
• Maintain policy governance documentation, repositories, implementation trackers, compliance evidence, milestones, action items, and remediation activities.
• Participate in governance meetings, working groups, and review sessions; document outcomes, track follow-up actions, and support implementation efforts.
• Prepare policy governance metrics, compliance summaries, management reports, and other governance-related communications.
• Provide guidance on policy requirements and implementation expectations to support organizational compliance.

Regulatory Monitoring and Analysis

• Research, monitor, and analyze cybersecurity regulations, regulatory guidance, compliance requirements, and industry standards.
• Assist in translating regulatory requirements into cybersecurity policies, standards, procedures, controls, and implementation plans.
• Support regulatory impact assessments, gap analyses, compliance initiatives, and remediation activities across applicable regulatory authorities.
• Coordinate stakeholder engagement, evidence collection, and implementation activities related to regulatory compliance efforts.
• Track regulatory implementation progress, including risks, dependencies, issues, corrective actions, and compliance outcomes.
• Prepare regulatory updates, executive summaries, compliance metrics, and implementation status reports for leadership and stakeholders.
• Partner with Legal, Compliance, Privacy, Risk Management, Technology, and business teams to support regulatory interpretation and implementation.
• Identify opportunities to improve regulatory monitoring, reporting, and compliance processes through standardization, automation, and operational efficiencies.

Requirements & Tech Stack

Core Skills

• Professional fluency in English and Spanish (written and verbal).
• Foundational knowledge of cybersecurity governance principles, regulatory compliance, and information security frameworks.
• Sound analytical, organizational, communication, and documentation skills.
• Ability to prioritize multiple assignments and collaborate effectively with cross-functional teams.
• Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Teams.
• Ability to clearly explain and articulate technical concepts using non-technical language.
• Ability to initiate, facilitate and promote Cybersecurity within the organization and monitor adherence to Cybersecurity policies, standards and controls.

Knowledge Areas

• High-level understanding of financial services industry, security, risk and privacy.
• Current knowledge and ability to stay up-to-date on the latest Cybersecurity legislation, regulations, advisories, alerts and vulnerabilities.
• Knowledge of Information Security and Cybersecurity frameworks.
• Knowledge of security methodologies, policies, standards and industry practices.
• Knowledge of information technology systems, infrastructure and operations.
• Understanding of cloud technologies and concepts.
• Familiarity with DevOps and Agile development process.

Preferred Familiarity

• Familiarity with cybersecurity frameworks and standards, including:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• NIST SP 800-171
• ISO 27001
• Exposure to policy management platforms, workflow tools, or regulatory tracking solutions.

Working effectively within an AI enabled environment

• Ability to use AI tools (e.g., Microsoft Copilot) to support daily work.
• Skills in evaluating AI outputs for accuracy, compliance, and bias.
• Experience integrating AI into workflows to improve efficiency or insights.
• Familiarity with AI assisted research, summarization, and content generation.
• Understanding of responsible AI use, including ethics and data protection.

Qualifications

Experience

• 0-2 years of experience in large and complex business environments with a successful track record working directly with senior level management with working knowledge in one or more of the following domains: Access Control, Telecom and Network Security, Cybersecurity Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance.
• 0-2 years of experience in the financial services industry.
• 0-2 years of demonstrable experience leading collaborative programs and projects with senior level management.

Education

• High School Diploma or equivalent required.
• Bachelor’s Degree or equivalent experience strongly preferred.