Security Compliance Analyst

InvGate; Argentina; Presencial; ARS 6.500.000 - 9.750.000; Jornada completa

Descripción de la vacante

InvGate, una empresa SaaS en crecimiento, busca un Analista de Cumplimiento de Seguridad de la Información para trabajar en su equipo. Con responsabilidades en cumplimiento de requisitos como SOC 2 y ISO 27001, la posición ofrece oportunidades reales de desarrollo profesional, clases de inglés, y beneficios como seguro de salud y vacaciones extendidas.

Servicios

Clases de inglés totalmente cubiertas

Entrenamiento técnico

Seguro de salud de primer nivel

Reembolso por trabajo remoto

Vacaciones extendidas

Licencia de paternidad

Formación

• 2 años de experiencia en roles GRC en el sector IT.
• Experiencia en procesos de certificación SOC 2 y ISO 27001.
• Experiencia en clasificación y documentación de datos sensibles.

Responsabilidades

• Seguimiento con ingenieros para cumplir con requisitos de continuidad de cumplimiento.
• Realizar autoevaluaciones y implementaciones de normativas de privacidad.
• Coordinar la hoja de ruta de certificación y cumplimiento de la empresa.

Conocimientos

Cumplimiento de normativas

Auditorías

Clasificación de datos

Descripción del empleo

InvGate is a fast growing SaaS company that develops products for IT management and service automation, used by clients in over 60 countries in industries such as banking, e-commerce, education and technology.

We’re looking for a Information Security Compliance Analyst to join our team. Whoever occupies the position will have as a priority to advance the state of compliance with SOC 2 Type 2 and ISO 27001.

Key Responsibilities

• Follow-up with engineers assigned to tasks of our compliance platform (Vanta) to comply in a timely manner with compliance continuity requirements.
• Carry out self-assessments and implementations of legal data privacy regulations (GDPR, CCPA, LGPD, NIS 2 among others).
• Answer customer security questionnaires, contact with customers (ask in interview what the process is like)
• Lead the company's certification and compliance roadmap, leading the annual recurrence of certifications.
• Conduct product, business and compliance impact assessments, and assist in the creation of strategies to solve identified risks
• Carry out customer and company data classifications to identify and categorize sensitive data based on the level of confidentiality, criticality, geographic location, legal and regulatory impact.

Requirements

• 2 years of experience in GRC (Governance, Risk and Compliance) roles in the IT sector.
• Experience in the SOC 2 Type II, ISO 27001 certification process.
• Experience in searching, classifying and documenting sensitive data reservoirs within productive and non-productive infrastructures
• Desired: exposure to ISO 27017, 27018, 12207, NIST 800-54.

It is a plus to have

• Experience in compliance with privacy laws and data management.
• Creation, modification and updating of company security policies, together with Legal.
• Requirements analysis and process engineering to create or adapt complementary solutions to company products and processes.

We offer real opportunities for professional development, fully covered English classes, technical training both in-house and at educational centers, top-tier health insurance, a fixed amount for purchases in the food sector, reimbursement for remote work, and extended vacation and paternity leave.

Our office is located in Belgrano, CABA. This position is Hybrid , requiring office attendance at least twice a week.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf