Information Security Analyst – Cybersecurity

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Oversee, evaluate, and react to cybersecurity incidents, alerts, and vulnerabilities.

• Perform security risk assessments to pinpoint potential threats across various systems, networks, and applications.

• Aid in maintaining compliance with SOC 2, ISO 27001, NIST, CIS Controls, and GDPR as applicable.

• Conduct vulnerability assessments and coordinate remediation efforts with technical teams.

• Analyze security logs, investigate suspicious activities, and take part in incident response processes.

• Collaborate with Engineering and DevOps teams to embed security best practices throughout the software development lifecycle (DevSecOps).

• Create, maintain, and revise information security policies, procedures, and documentation.

• Assist with both internal and external security audits.

• Oversee identity and access management (IAM), user permissions, and privileged access controls.

• Provide security awareness training and advocate for cybersecurity best practices across the organization.

• Keep abreast of emerging cyber threats, vulnerabilities, and security technologies.

• Work closely with IT, Engineering, DevOps, Compliance, and Business teams to uphold a strong security posture and implement security best practices across cloud and on-premise environments.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.

• A minimum of 3 years of experience in Information Security, Cybersecurity, Security Operations, or Risk & Compliance.

• Experience in supporting SOC 2 compliance initiatives and conducting security audits.

• In-depth knowledge of SOC 2, ISO 27001, NIST, and CIS Controls.

• Experience in vulnerability management, risk assessments, and incident response.

• Familiarity with SIEM, EDR, IAM, and endpoint security solutions.

• Experience in AWS, Azure, or Google Cloud environments.

• Strong analytical, documentation, and problem-solving abilities.

• Professional proficiency in English (B2+/C1).

• Capacity to work independently in a remote and collaborative setting.

• Preferred security certifications include Security+, CySA+, CISSP, CISM, CISA, SSCP, CEH, or GSEC.

• Preferred experience with U.S.-based companies or global organizations.

• Preferred knowledge of DevSecOps, cloud security, and infrastructure security.

• Preferred experience with penetration testing or vulnerability scanning tools.

• Familiarity with GDPR, HIPAA, or PCI DSS is preferred.

• Preferred experience in SaaS, Technology, FinTech, Healthcare, or Cloud-based organizations.

• Experience with SIEM tools such as Splunk, Sentinel, or QRadar.

• Experience with IAM tools such as Okta, Azure AD, or Active Directory.

• Experience in securing AWS, Azure, or GCP environments.

• English proficiency at the B2+ level.

🏝️ Benefits

• Full-time employment.

• Remote work arrangement.

• Chance to collaborate with seasoned technology professionals.

• Opportunity to enhance cybersecurity posture and safeguard critical business assets.

• Support compliance initiatives that foster trust with customers and partners.

• One-Way Video Interview as the subsequent step in the hiring process.