Remote Information Security Analyst — GRC & Vendor Risk

Scale Up Recruiting Partners; Ciudad de Mendoza; Presencial; ARS 133.960.000 - 193.498.000; Jornada completa

Descripción de la vacante

Scale Up Recruiting Partners is seeking an Information Security Analyst for a long-term contractor role. You will own vendor security questionnaires end-to-end across multiple client accounts, coordinating with US-based startups and stakeholders in a fast-paced security consulting environment.

You will work with SOC 2, ISO 27001 and related controls, maintaining libraries of content and ensuring timely, accurate responses. Strong English, organization, and experience with SIG/CAIQ are essential.

Formación

• 2–4 years of experience completing vendor security questionnaires.
• Hands-on experience with SIG, CAIQ, or custom vendor questionnaires.
• Knowledge of SOC 2 and ISO 27001.
• Understanding core security concepts: SSO, MFA, encryption, cloud infra.
• Professional English (written and spoken).

Responsabilidades

• Monitor client Slack channels and respond promptly to incoming security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other ticketing systems to track requests through completion.
• Complete vendor security questionnaires (SIG, CAIQ, custom) through spreadsheets and security platforms such as OneTrust, Whistic, SecurityScorecard.
• Develop a deep understanding of each client's security posture, policies, controls, and technical environment.
• Maintain and continuously improve client answer libraries and knowledge bases.
• ,

Conocimientos

Vendor security questionnaires

GRC / compliance

Professional English

Strong organizational skills

Excellent written communication

Ability to manage multiple requests

Herramientas

Jira

Linear

OneTrust

Whistic

SecurityScorecard

Trust Center platforms

Descripción del empleo

Scale Up Recruiting Partners is seeking an Information Security Analyst for a long-term contractor role. You will own vendor security questionnaires end-to-end across multiple client accounts, coordinating with US-based startups and stakeholders in a fast-paced security consulting environment.

You will work with SOC 2, ISO 27001 and related controls, maintaining libraries of content and ensuring timely, accurate responses. Strong English, organization, and experience with SIG/CAIQ are essential.