Security & Compliance Analyst

This is a fully remote position, open to applicants in Colombia, +1 more country.

📋 Description

• Oversee and assess security alerts, escalating genuine issues as necessary.

• Manage incident response from initial triage to post-incident analysis.

• Conduct tabletop exercises.

• Evaluate security advisories and vulnerabilities.

• Monitor patching efforts in accordance with remediation service level agreements (SLAs).

• Uphold technical security measures, including encryption, key and certificate management, and secrets rotation.

• Assess cloud and infrastructure configurations against security policies and ensure necessary fixes are implemented.

• Execute vulnerability scans, backup restorations, and access reviews.

• Gather SOC 2 evidential documentation, including those related to failed Vanta tests.

• Assist with vendor security evaluations, client security questionnaires, and GDPR compliance efforts.

• Provide reports on alerts, vulnerabilities, and outstanding compliance matters.

• Collaborate with Engineering, IT, and Legal teams; report directly to the Director of Legal.

⛳️ Requirements

• 3 to 5 years of experience in a security operations, cybersecurity, or security engineering capacity.

• Familiarity with SOC 2, GDPR, and audit procedures.

• Practical experience in log analysis, vulnerability management, and incident response, including conducting post-mortems.

• Knowledge of encryption as well as key and certificate management.

• Experience in securing cloud infrastructures on AWS and GCP platforms.

• Strong written and verbal communication skills in English.

• Experience with Vanta or comparable compliance platforms is a plus.

• Security+, CySA+, or CISSP (or Associate of ISC2) certification is desirable.

🏝️ Benefits

• Iterative and empowering processes.

• Full ownership and autonomy to advance projects.

• Flexible work environment within a distributed team.

• Competitive salary.

• Flexible paid time off (PTO).

• Comprehensive healthcare coverage.

• Opportunities for education and professional development.