Senior GRC Security Specialist, Colombia

Ciandt; Colombia; A distancia; COP 80.000.000 - 120.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Premium Healthcare

Meal voucher

Maternity and Parental leaves

Mobile services subsidy

Sick pay-Life insurance

CI&T University

Colombian Holidays

Paid Vacations

Descripción de la vacante

CI&T in Colombia is seeking a Senior GRC Security Specialist to join our cybersecurity team. The role focuses on maintaining and enhancing our risk management processes and ensuring compliance with industry standards in the medical device sector.

You will lead risk assessments, coordinate audits, and help implement controls aligned with HITRUST, HIPAA, and other regulations, collaborating with global teams to deliver secure, compliant solutions.

Formación

• Advanced English required for communication with international clients.
• Excellent communication skills across technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities, capable of making informed decisions under pressure.
• Conduct cybersecurity risk assessments and identify vulnerabilities with mitigation strategies.
• Collaborate with cross-functional teams to implement GRC policies, procedures and controls.
• Lead efforts to maintain and update documentation related to GRC processes, risk assessments, policies and procedures.
• Participate in internal and external audits and provide documentation to demonstrate compliance.
• Solid understanding of GRC frameworks, industry standards and regulatory requirements.

Responsabilidades

• Enterprise Cybersecurity Risk Management: identify, document, and address control nonconformities and high-risk vulnerabilities; maintain the Risk Registry.
• Third-party Cybersecurity Risk Assessments: perform annual assessments in line with internal and external standards.
• Cybersecurity Controls Management: maintain and enhance control framework; map controls and evidence of execution; identify gaps and align requirements (HITRUST, HIPAA, ENS).
• Policies and Procedures Development: create and maintain cybersecurity policies and procedures in compliance with regulatory and contractual standards.

Conocimientos

Advanced English

Excellent communication

Analytical thinking

Risk assessment

Cross-functional collaboration

Documentation management

Audit support

GRC knowledge

Descripción del empleo

Este site está equipado com recursos de acessibilidade. Pressione option+c para ativar o perfil cego ou option+p para acessar o menu de acessibilidade e ajuste a experiência de navegação de acordo com suas necessidades. Skip to main content

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.

With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.

We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.

Senior GRC Security Specialist, Colombia

Hi There, This is Laura from CI&T! I am a Talent Attracting Analyst looking for people located in Colombia for a Senior GRC Security Analyst to join our team. The GRC Security Analyst will play a key role in maintaining and enhancing our Cybersecurity Risk Management Process while ensuring adherence to industry standards and regulatory requirements in the medical device sector. This position requires a detail-oriented and proactive individual.

Responsibilities:

• Enterprise Cybersecurity Risk Management: Continuously identify, log, and analyze control nonconformities and unresolved/high-risk vulnerabilities across different sources. Maintain the Risk Registry and deliver timely risk treatment updates and reports to stakeholders.
• Third-party Cybersecurity Risk Assessments: Executed annually, ensuring alignment with internal risk standards and external compliance requirements.
• Cybersecurity Controls Management: Maintain and enhance the cybersecurity control framework by mapping existing controls, collecting evidence of execution, identifying gaps or nonconformities, and aligning overlapping requirements under a unified structure. Ensure adherence to frameworks such as HITRUST, HIPAA, Spain ENS certification.
• Policies and Procedures Development: Create and maintain cybersecurity-related policies and procedures. Ensure documentation complies with regulatory and contractual standards.

Requirements for this challenge:

• Advanced english for communication with international clients
• Excellent communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to make informed decisions in high-pressure situations.
• Conduct cybersecurity risk assessments, identify potential vulnerabilities, and recommend strategies to mitigate risks.
• Collaborate with cross-functional teams to ensure that GRC policies, procedures, and controls are effectively communicated and implemented.
• Lead efforts to maintain and update documentation related to GRC processes, including risk assessments, policies, and procedures.
• Participate in internal and external audits, providing support and documentation as needed to demonstrate compliance.
• Strong understanding of GRC frameworks, industry standards, and regulatory requirements.
• Excellent analytical skills, attention to detail, and the ability to work independently and in cross-functional teams.

Our benefits include:

• Premium Healthcare
• Meal voucher
• Maternity and Parental leaves
• Mobile services subsidy
• Sick pay-Life insurance
• CI&T University
• Colombian Holidays
• Paid Vacations And many others.

Collaboration is our superpower, diversity unites us, and excellence is our standard. We value diverse identities and life experiences, fostering a diverse, inclusive, and safe work environment. We encourage applications from diverse and underrepresented groups to our job positions.