GRC Specialist: Privacy, Security & Compliance

bizagi; Bogotá ciudad; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

Bizagi in Bogotá is seeking a Governance, Risk & Compliance Specialist to advance our security and privacy programs across Latam as we scale AI-enabled platforms.

You will implement corporate security and compliance initiatives, assess DPIAs, conduct third-party risk reviews, and translate complex regulations into actionable guidance for technical and business teams. A strong background in ISO 27001, GDPR, SARO, and cloud security is essential.

Formación

• 4+ years of GRC experience with global cloud/AI companies
• Experience with security monitoring frameworks and incident response processes
• Exposure to SARO, GDPR, Circulares de SFC, HIPAA, etc.

Responsabilidades

• Define and update data lifecycle policies with Security & Compliance, Legal, IT, and Cloud teams
• Ensure adherence to regulatory frameworks across customer and internal environments
• Monitor privacy and security compliance across environments and identify gaps
• Support DPIAs and risk assessments with Legal and system owners
• Assist internal and external audits (ISO 27001, SOC 2) and maintain risk dashboards

Conocimientos

AI Fluency

Analytical thinking

Attention to detail

Problem-solving

Stakeholder management

Communication and presentation skills

Educación

Bachelor's degree in information technology, computer science, MIS or related

Postgraduate degree in Information Security or Risk management

Herramientas

Azure Cloud Security

FedRAMP

ISO 27001 compliance tools

Descripción del empleo

Bizagi in Bogotá is seeking a Governance, Risk & Compliance Specialist to advance our security and privacy programs across Latam as we scale AI-enabled platforms.

You will implement corporate security and compliance initiatives, assess DPIAs, conduct third-party risk reviews, and translate complex regulations into actionable guidance for technical and business teams. A strong background in ISO 27001, GDPR, SARO, and cloud security is essential.