Cybersecurity Risk & Compliance Analyst (Senior) ID34575

AgileEngine; Florianópolis; Híbrido; USD 50.000 - 90.000; Tempo integral

Resumo da oferta

An established industry player is seeking a Cybersecurity Risk & Compliance Analyst to join their dynamic team. In this role, you will tackle challenging tasks, including conducting vulnerability assessments, maintaining compliance standards, and collaborating with IT teams to enhance security measures. This innovative firm offers a flexible work environment and opportunities for professional growth through mentorship and exciting projects with top-tier clients. If you're passionate about cybersecurity and eager to make an impact, this is the perfect opportunity for you.

Serviços

Professional growth through mentorship

Competitive USD-based compensation

Budgets for education

Flexible work schedule

Participation in exciting projects

Qualificações

• 4+ years in cybersecurity focusing on risk management and compliance.
• Strong understanding of NIST RMF and ISO 27001 methodologies.

Responsabilidades

• Perform vulnerability scans and prioritize remediation based on risk.
• Coordinate evidence collection for external audits like SOC2 and PCI DSS.

Conhecimentos

Cybersecurity

Risk Management

Compliance Frameworks

Vulnerability Management

Analytical Skills

Collaboration

English (Upper-Intermediate)

Ferramentas

Security Tooling

Descrição da oferta de emprego

Cybersecurity Risk & Compliance Analyst (Senior) ID34575

Join to apply for the Cybersecurity Risk & Compliance Analyst (Senior) ID34575 role at AgileEngine

AgileEngine is one of the Inc. 5000 fastest-growing companies in the U.S. and a top-3 ranked dev shop according to Clutch. We create award-winning custom software solutions that help companies across 15+ industries change the lives of millions.

If you like a challenging environment where you’re working with the best and are encouraged to learn and experiment every day, there’s no better place - guaranteed! :)

WHAT YOU WILL DO

1. Perform regular vulnerability scans across systems and applications; analyze findings and prioritize remediation based on business risk.
2. Maintain accurate asset inventories including SBOM/HBOM for core systems.
3. Collaborate with IT/DevOps teams to track and validate the remediation of security vulnerabilities.
4. Coordinate evidence collection and preparation for external audits (SOC2, HITRUST, PCI DSS).
5. Develop and maintain internal security policies and standards aligned with compliance requirements.
6. Monitor compliance posture, identify gaps, and support remediation plans.
7. Conduct recurring risk assessments to identify security control weaknesses and emerging threats.
8. Maintain the organization’s risk register and follow up on mitigation efforts.
9. Evaluate risks related to emerging technologies, including Generative AI.
10. Support incident response activities and address security inquiries from clients and partners.
11. Provide day-to-day guidance on security best practices to internal stakeholders.

MUST HAVE

• 4+ years of experience in cybersecurity with a focus on risk management and compliance.
• Strong understanding of vulnerability management and risk assessment methodologies (NIST RMF, ISO 27001).
• Hands-on experience with compliance frameworks (SOC2, HITRUST, PCI DSS).
• Excellent analytical skills and a collaborative approach, especially when working with IT and DevOps teams.
• Upper-Intermediate English level.

NICE TO HAVES

• Familiarity with security tooling for audit automation or asset tracking.
• Experience supporting incident response and customer-facing security assessments.
• Awareness of modern security challenges in the healthcare or SaaS environment.

THE BENEFITS OF JOINING US

• Professional growth through mentorship, TechTalks, and personalized growth roadmaps.
• Competitive USD-based compensation and budgets for education, fitness, and team activities.
• Participation in exciting projects with top-tier clients, including Fortune 500 companies.
• Flexible work schedule with options for remote work and in-office presence.

NEXT STEPS AFTER YOU APPLY

The next steps will be shared via email within a few hours. Please check your inbox and the LaunchPod site for updates.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• IT Services and IT Consulting