Remote InfoSec Analyst — Vendor Risk & GRC (Contract)

Scale Up Recruiting Partners; Bogotá; Presencial; COP 278.353.000 - 402.066.000; Jornada completa

Descripción de la vacante

Scale Up Recruiting Partners is seeking an Information Security Analyst (Contractor) to own the vendor security questionnaire process across multiple client accounts. This remote role collaborates with U.S.-based startups, coordinating with technical stakeholders to ensure timely, accurate responses while maintaining a strong security posture.

Ideal candidates have 2–4 years in GRC/compliance or security questionnaire work, hands-on SIG/CAIQ experience, and solid knowledge of SOC 2 and ISO

Formación

• 2–4 years of experience in vendor security questionnaires or GRC/compliance.
• Hands-on experience completing SIG, CAIQ, or custom vendor questionnaires.
• Working knowledge of SOC 2 and ISO 27001.

Responsabilidades

• Monitor client Slack channels and respond to incoming security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other ticketing systems to track requests to completion.
• Complete vendor security questionnaires (SIG, CAIQ, or custom) through spreadsheets and platforms like OneTrust, Whistic, SecurityScorecard.
• Develop a deep understanding of each client's security posture, policies, controls, and environment.
• Maintain and improve client questionnaire knowledge bases.
• Coordinate with security consultants, engineers, and SMEs for technical clarification.
• Escalate recurring gaps or missing controls affecting responses.
• Ensure all questionnaires are completed accurately and within deadlines.

Conocimientos

Vendor questionnaires

GRC Compliance

Security questionnaires

SOC 2

ISO 27001

SSO

MFA

Endpoint security

Cloud fundamentals

Backup & DR

Vendor risk

Herramientas

Jira

Linear

OneTrust

Whistic

SecurityScorecard

Descripción del empleo

Scale Up Recruiting Partners is seeking an Information Security Analyst (Contractor) to own the vendor security questionnaire process across multiple client accounts. This remote role collaborates with U.S.-based startups, coordinating with technical stakeholders to ensure timely, accurate responses while maintaining a strong security posture.

Ideal candidates have 2–4 years in GRC/compliance or security questionnaire work, hands-on SIG/CAIQ experience, and solid knowledge of SOC 2 and ISO