Remote GRC Analyst - Compliance Operations & Audits

Outsourced; Colombia; Remote; COP 60,000,000 - 120,000,000; Full time

Benefits offered by this job

Fully remote

Professional development

Exposure to major compliance Framework

Job summary

Outsourced is seeking an experienced GRC Analyst to support U.S.-based startups and technology companies from a fully remote Colombia-based team. You will manage day-to-day compliance operations across multiple client accounts, ensuring controls are implemented and evidence is audit-ready.

You will work with SOC 2, ISO 27001, and other frameworks, configure GRC platforms, conduct risk assessments, and coordinate audits with U.S.-based professionals. Strong attention to detail is essential.

Qualifications

• 2–4 years in GRC, IT audit, cybersecurity compliance or security operations.
• Experience managing multiple clients or compliance engagements simultaneously.
• Working knowledge of SOC 2, ISO 27001, HIPAA, NIST 800-53, GDPR or related frameworks.
• Hands-on with at least one GRC platform (Drata, Vanta, Secureframe, Thoropass, Sprinto).
• Strong written English and ability to interact with U.S.-based clients.

Responsibilities

• Manage daily compliance operations across multiple client accounts.
• Monitor GRC platforms for control status, evidence and tests.
• Identify and remediate failing controls; track through resolution.
• Collect and maintain audit-ready evidence for SOC 2, ISO 27001, and others.
• Support SOC 2 Type I/II and ISO 27001 assessments and related activities.
• Conduct user access reviews and third-party security evaluations.
• Configure GRC platforms and support security control implementations.
• Respond to client questions via Slack with clear guidance.
• Assist with DDQs and vendor assessments as required.
• Track tasks and requests using Linear or similar tools.

Skills

GRC operations

SOC 2 readiness

ISO 27001

Regulatory compliance

English communication

Education

Bachelor's degree in CS/IS

Tools

Drata

Vanta

Secureframe

Thoropass

Sprinto

Job description

Outsourced is seeking an experienced GRC Analyst to support U.S.-based startups and technology companies from a fully remote Colombia-based team. You will manage day-to-day compliance operations across multiple client accounts, ensuring controls are implemented and evidence is audit-ready.

You will work with SOC 2, ISO 27001, and other frameworks, configure GRC platforms, conduct risk assessments, and coordinate audits with U.S.-based professionals. Strong attention to detail is essential.