Remote Security Compliance Analyst (Colombia)

Masabi; Colombia; À distance; COP 42 000 000 - 65 000 000; Plein temps

Résumé du poste

Masabi is hiring a Security Compliance Analyst for a fully remote role based in Colombia. You will own end-to-end security control processes, perform both manual and automated controls, and support audits and client security questionnaires.

You will help maintain evidence, registers and documentation, and explore automation using AI tools to streamline compliance across ISO 27001, SOC 2, PCI DSS, and NIST frameworks.

Qualifications

• Hands-on information security, IT compliance, internal control or audit experience.
• Experience preparing evidence for audits against frameworks such as ISO 27001, SOC 2, PCI DSS or NIST.
• Understanding of access control, risk management, third-party risk and data protection.
• Detail-oriented, organized and able to manage multiple recurring tasks.

Responsabilités

• Own a set of security control processes end to end: plan, execute, evidence, track findings to resolution.
• Perform manual and tool-based security controls to close gaps and ensure consistency.
• Carry out user access reviews and document results and actions.
• Run Third-Party Risk Management activities: assess suppliers, track risks, schedule reassessments.
• Maintain security and privacy registers accurate and current.
• Assist in bid/tender responses with clear, accurate security information.
• Respond to security questionnaires from customers and audits.
• Support audits and certifications (ISO 27001, SOC 2, PCI DSS, NIST) with evidence.
• Identify opportunities to automate controls and introduce AI-assisted improvements.

Connaissances

Information security

IT compliance

Audit

Access control

Risk management

Data protection

Documentation

Technical writing

Ownership

Outils

Vanta

AWS

Jira

Confluence

Description du poste

Masabi is hiring a Security Compliance Analyst for a fully remote role based in Colombia. You will own end-to-end security control processes, perform both manual and automated controls, and support audits and client security questionnaires.

You will help maintain evidence, registers and documentation, and explore automation using AI tools to streamline compliance across ISO 27001, SOC 2, PCI DSS, and NIST frameworks.