Information Security Analyst – Cybersecurity

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Oversee, evaluate, and address cybersecurity incidents, alerts, and vulnerabilities.

• Perform security risk assessments and detect threats across systems, networks, and applications.

• Assist in maintaining compliance with SOC 2, ISO 27001, NIST, CIS Controls, and GDPR where applicable.

• Conduct vulnerability assessments and coordinate remediation efforts with technical teams.

• Analyze security logs, investigate suspicious activities, and engage in incident response.

• Collaborate with Engineering and DevOps teams to embed security practices throughout the software development lifecycle.

• Create, maintain, and revise information security policies, procedures, and documentation.

• Aid in both internal and external security audits.

• Oversee identity and access management, user permissions, and privileged access controls.

• Provide security awareness training and advocate for cybersecurity best practices.

• Remain updated on emerging cyber threats, vulnerabilities, and security technologies.

• Partner with IT, Engineering, DevOps, Compliance, and Business teams across cloud and on-premise environments.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

• 3+ years of experience in Information Security, Cybersecurity, Security Operations, or Risk & Compliance.

• Proven experience supporting SOC 2 compliance initiatives and security audits.

• Extensive knowledge of SOC 2, ISO 27001, NIST, and CIS Controls.

• Experience in vulnerability management, risk assessments, and incident response.

• Familiarity with SIEM, EDR, IAM, and endpoint security solutions.

• Experience working within AWS, Azure, or Google Cloud environments.

• Strong analytical, documentation, and problem-solving abilities.

• Professional English proficiency (B2+/C1).

• Capability to work independently in both remote and collaborative settings.

• Preferred security certifications include Security+, CySA+, CISSP, CISM, CISA, SSCP, CEH, or GSEC.

• Experience supporting U.S.-based companies or global organizations is advantageous.

• Knowledge of DevSecOps, cloud security, and infrastructure security is preferred.

• Familiarity with penetration testing or vulnerability scanning tools is a plus.

• Understanding of GDPR, HIPAA, or PCI DSS is preferred.

• Experience in SaaS, Technology, FinTech, Healthcare, or Cloud-based organizations is advantageous.

• Experience with SIEM tools such as Splunk, Sentinel, or QRadar.

• Experience with IAM tools like Okta, Azure AD, or Active Directory.

• Expertise in securing AWS, Azure, or GCP environments.

• English proficiency at B2+ level.

🏝️ Benefits

• Opportunity to collaborate with seasoned technology professionals.

• Directly contribute to enhancing cybersecurity posture and safeguarding critical business assets.

• Support compliance initiatives that foster trust with customers and partners.

• Participate in a One-Way Video Interview as the next step in the hiring process.