GRC & Privacy Specialist — Cloud & AI Compliance

Bizagi Group; Bogotá ciudad; On-site; COP 120,000,000 - 180,000,000; Full time

Job summary

Bizagi seeks a Governance, Risk & Compliance Specialist to strengthen security and privacy across LATAM. The role emphasizes data protection, regulatory alignment, and collaboration with Legal, IT, and Cloud teams to safeguard customer and internal environments.

Ideal candidates have 4+ years in GRC for global cloud/AI contexts, ISO 27001/SOC 2 exposure, and strong English communication. Bogotá-based with a focus on data protection and privacy governance.

Qualifications

• Bachelor’s degree in information technology, computer science, MIS, or related field.
• Postgraduate degree or certifications in information security/risk management.
• Industry certifications such as CISM, CRISC, ISO 27001:2022 auditor.

Responsibilities

• Define and update data lifecycle policies with Security & Compliance, Legal, IT, and Cloud teams.
• Ensure adherence to GDPR, HIPAA, and other regulatory frameworks, including regulatory responses.
• Monitor privacy and security across customer environments and internal operations.
• Develop understanding of Azure-based architecture to identify data flows and controls.
• Support DPIAs for systems/processes with Legal and owners to mitigate privacy risks.
• Conduct third-party/vendor risk assessments and support security/privacy by design reviews.
• Act as a point of contact for privacy and security questions and guidance to teams.
• Develop and deliver compliance and privacy awareness materials and training.
• Support audits (ISO 27001, SOC 2) and maintain risk dashboards with mitigations.

Skills

AI Fluency

Analytical thinking

Attention to detail

Problem-solving

Stakeholder management

Communication

Education

Bachelor’s degree in information technology

Postgraduate degree in information security

Security certifications (CISM, CRISC)

Tools

Azure Cloud

ISO 27001 compliance

NIST framework

Job description

Bizagi seeks a Governance, Risk & Compliance Specialist to strengthen security and privacy across LATAM. The role emphasizes data protection, regulatory alignment, and collaboration with Legal, IT, and Cloud teams to safeguard customer and internal environments.

Ideal candidates have 4+ years in GRC for global cloud/AI contexts, ISO 27001/SOC 2 exposure, and strong English communication. Bogotá-based with a focus on data protection and privacy governance.