Security & Compliance Analyst - SOC 2, GDPR, Remote

Graphite; Colombia; Remote; COP 220,285,000 - 346,162,000; Full time

Benefits offered by this job

Quality healthcare coverage

Education opportunities

Flexible PTO

Job summary

Graphite is a technology-enabled growth agency; we are a fully remote team with members across North America, Latin America, and Europe. We are seeking a mid-level Security & Compliance Analyst to support our security program and SOC 2 and GDPR commitments.

You will work closely with Engineering, IT, and Legal to triage incidents, manage vulnerabilities, and ensure our cloud Security practices (AWS/GCP) meet policy requirements. Excellent English communication is essential.

Qualifications

• 3 to 5 years in a security operations, cybersecurity or security engineering role.
• Working knowledge of SOC 2 and GDPR and audit processes.
• Hands-on experience with log analysis, vulnerability management and incident response, including post-mortems.
• Working knowledge of encryption and key and certificate management.
• Experience securing cloud infrastructure on AWS and GCP.
• Nice to have: experience with Vanta or a similar compliance platform, and a certification such as Security+, CySA+ or CISSP (or Associate of ISC2).
• Excellent written and verbal English communication skills.

Responsibilities

• Monitor and triage security alerts, and elevate real issues.
• Coordinate incident response, from triage through post-mortem, and run tabletop exercises.
• Triage security advisories and vulnerabilities, and track patching against our remediation SLAs.
• Maintain technical security controls, including encryption, key and certificate management, and secrets rotation.
• Review cloud and infrastructure configurations against our security policies, and follow up on fixes.
• Run periodic checks (vulnerability scans, backup restores, access reviews) and collect SOC 2 evidence, including for failing Vanta tests.
• Support vendor security reviews, client security questionnaires and GDPR work.
• Report on the status of alerts, vulnerabilities and open compliance items.

Skills

Log analysis

Vulnerability management

Incident response

Encryption & cert mgmt

AWS security

GCP security

Audit readiness

Tools

Vanta

Job description

Graphite is a technology-enabled growth agency; we are a fully remote team with members across North America, Latin America, and Europe. We are seeking a mid-level Security & Compliance Analyst to support our security program and SOC 2 and GDPR commitments.

You will work closely with Engineering, IT, and Legal to triage incidents, manage vulnerabilities, and ensure our cloud Security practices (AWS/GCP) meet policy requirements. Excellent English communication is essential.