Security & Compliance Analyst — SOC 2 & GDPR (Remote)

Graphite Growth, Inc.; Colombia; Remote; COP 251,754,000 - 346,162,000; Full time

Benefits offered by this job

Flexible PTO

Quality healthcare coverage

Education opportunities

Competitive compensation

Job summary

Graphite is a technology-enabled growth agency with a fully distributed team across North America, LATAM, and Europe. We are seeking a mid-level Security & Compliance Analyst to support SOC 2 and GDPR commitments and maintain strong controls.

You will own hands-on security work, coordinate incident response, and collaborate with Engineering, IT, and Legal to protect client data. This is a fully remote role with opportunities to grow in a security-conscious environment.

Qualifications

• 3–5 years in security operations or related field.
• Hands-on with log analysis and incident response.
• Familiar with SOC 2 and GDPR.
• Experience securing AWS/GCP environments.
• Strong written and verbal English.

Responsibilities

• Monitor and triage security alerts and escalate real issues.
• Coordinate incident response from triage to post-mortem.
• Triage advisories and patching; track remediation SLAs.
• Maintain security controls including encryption and key management.
• Review cloud configurations against security policies.
• Run vulnerability scans and SOC 2 evidence collection.
• Support vendor security reviews and GDPR work.
• Report on alerts, vulnerabilities and compliance items.

Skills

Security operations

Incident response

SOC 2 knowledge

GDPR knowledge

AWS security

GCP security

Vulnerability mgmt

Log analysis

Key management

English communication

Education

Security+ / CySA+ / CISSP

Tools

Vanta

AWS Console

GCP Console

Job description

Graphite is a technology-enabled growth agency with a fully distributed team across North America, LATAM, and Europe. We are seeking a mid-level Security & Compliance Analyst to support SOC 2 and GDPR commitments and maintain strong controls.

You will own hands-on security work, coordinate incident response, and collaborate with Engineering, IT, and Legal to protect client data. This is a fully remote role with opportunities to grow in a security-conscious environment.