Information Security Analyst – Cybersecurity

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Monitor, evaluate, and address cybersecurity incidents, alerts, and vulnerabilities.

• Conduct security risk assessments across various systems, networks, and applications.

• Support and uphold compliance with SOC 2, ISO 27001, NIST, CIS Controls, and GDPR where applicable.

• Execute vulnerability assessments and coordinate remediation efforts with technical teams.

• Analyze security logs and investigate any suspicious activities.

• Engage in incident response activities.

• Collaborate with Engineering and DevOps to embed security throughout the software development lifecycle (DevSecOps).

• Create, maintain, and refresh information security policies, procedures, and documentation.

• Assist with both internal and external security audits.

• Oversee IAM, user permissions, and privileged access controls.

• Deliver training on security awareness.

• Keep up to date with emerging cyber threats, vulnerabilities, and security technologies.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related domain.

• Over 3 years of experience in Information Security, Cybersecurity, Security Operations, or Risk & Compliance.

• Proven experience supporting SOC 2 compliance initiatives and security audits.

• In-depth knowledge of SOC 2, ISO 27001, NIST, and CIS Controls.

• Experience in vulnerability management, risk assessments, and incident response.

• Familiarity with SIEM, EDR, IAM, and endpoint security solutions.

• Experience working with AWS, Azure, or Google Cloud environments.

• Strong analytical, documentation, and problem-solving abilities.

• Proficient in professional English (B2+/C1).

• Capable of working independently in a remote and collaborative setting.

• Preferred: Security+, CySA+, CISSP, CISM, CISA, SSCP, CEH, or GSEC certifications.

• Preferred: Experience working with U.S.-based companies or international organizations.

• Preferred: Understanding of DevSecOps, cloud security, and infrastructure security.

• Preferred: Background in penetration testing or vulnerability scanning tools.

• Preferred: Familiarity with GDPR, HIPAA, or PCI DSS.

• Preferred: Experience in SaaS, Technology, FinTech, Healthcare, or Cloud-based organizations.

• Experience with SIEM tools such as Splunk, Sentinel, or QRadar.

• Experience with IAM solutions like Okta, Azure AD, and Active Directory.

• Experience with CrowdStrike, Microsoft Defender, Nessus, or Qualys is preferred.

🏝️ Benefits

• Strategic focus on security, providing an opportunity to enhance cybersecurity posture.

• Collaboration with skilled technology professionals.

• Contribution to compliance initiatives that foster trust with customers and partners.

• One-Way Video Interview as part of the recruitment process.