DSPM Lead: Data Security Posture & Compliance

Auxis; Bogotá ciudad; On-site; COP 144,000,000 - 216,000,000; Full time

Job summary

Auxis in Bogotá is seeking a DSPM Lead to design, implement, and manage Data Security Posture Management across cloud, hybrid, and on‑prem environments. You will gain visibility into where sensitive data resides, how it is accessed, and how its security posture can be strengthened, while ensuring compliance with global regulations.

The role requires hands‑on DSPM expertise and collaboration with Information Security, Data Governance, Risk & Compliance, and GTech to protect data across regions

Qualifications

• Bachelor’s degree in information management or related field.
• 5+ years in Data Management, Governance, or Compliance.
• Deep DSPM concepts: discovery, classification, lineage, access governance.
• Cloud security architecture across Azure, AWS, SaaS.
• Strong IAM controls, RBAC, and data-level access models.
• Knowledge of GDPR, HIPAA, SOX, ISO 27001, NIST frameworks.

Responsibilities

• Lead sensitive data discovery and classification efforts.
• Assess data exposure risks and misconfigurations.
• Collaborate with IAM to enforce least-privilege access.
• Implement encryption, masking, tokenization, and DLP policies.
• Provide monitoring and automated reporting to leadership.
• Align DSPM with DLM and Data Governance programs.

Skills

English proficiency

Attention to detail

Analytical thinking

Cross-functional collaboration

Translate regulatory requirements

Continuous improvement

Education

Bachelor’s degree in Information Management or related field

Certifications: CISSP, CISM, CCSP or Azure Security Engineer

Tools

Veronis

Proofpoint

Cyberhaven

Job description

Auxis in Bogotá is seeking a DSPM Lead to design, implement, and manage Data Security Posture Management across cloud, hybrid, and on‑prem environments. You will gain visibility into where sensitive data resides, how it is accessed, and how its security posture can be strengthened, while ensuring compliance with global regulations.

The role requires hands‑on DSPM expertise and collaboration with Information Security, Data Governance, Risk & Compliance, and GTech to protect data across regions