Security Compliance Analyst

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Take full ownership of designated security control processes from start to finish, encompassing planning, execution, evidence collection, and follow-up on findings.

• Execute both manual and automated security controls.

• Conduct user access reviews and other routine assessments, documenting results and actions taken.

• Manage the Third-Party Risk Management process, including supplier evaluations, security posture assessments, risk tracking, and re-evaluations.

• Keep up-to-date registers for suppliers, risks, assets, and data processing activities.

• Evaluate security and privacy requirements within bids and tenders.

• Collaborate with the broader team to prepare clear and accurate responses.

• Address customer security questionnaires and information requests effectively.

• Assist in audits and certifications for ISO 27001, SOC 2, PCI DSS, and Cyber Essentials.

• Enhance and automate control processes, leveraging AI tools where appropriate.

⛳️ Requirements

• Candidates must be located in Colombia to be considered.

• Proficient in English at an advanced level (B2 or above).

• Some practical experience in information security, IT compliance, internal controls, auditing, or a related field.

• A solid understanding of access control, risk management, and data protection principles.

• A keen interest in technology, including systems, cloud services, and SaaS solutions.

• Strong writing skills and the ability to present information clearly and effectively.

• Competence in managing recurring tasks and meeting multiple deadlines.

• Experience with Third-Party Risk Management or vendor security assessments is a plus.

• Familiarity with ISO 27001, SOC 2, PCI DSS, GDPR, or NIST is desirable.

• Background in supporting RFPs, tenders, or responding to customer security questionnaires is advantageous.

• Experience with compliance automation or GRC platforms is beneficial.

• Interest in scripting, low-code tools like n8n or Make, or enhancing workflows with AI is a plus.

• Familiarity with Jira or Confluence is a nice-to-have.

🏝️ Benefits

• 15 days of paid vacation each year, in addition to 18 public holidays.

• Access to private healthcare services.

• Monthly allowance for team bonding activities.

• Support for menopause-related issues.

• Choice of a workstation setup.

• Opportunity to work remotely from any country in the world for up to 3 months each year.

• A fun and collaborative workplace culture focused on making a positive impact globally.

• Annual training allowance of up to $750 USD.

• $250 USD allocated for home office expenses each year.

• Fully remote working model.