Senior Information Security Governance & Control Specialist

Oceans Code Experts; Colombia; Presencial; COP 100.440.000 - 178.560.000; Jornada completa

Descripción de la vacante

Oceans Code Experts is seeking a Senior Associate in Information Security Governance, Policy & Control to join our team. The role focuses on working with GRC, risk management, and security controls, requiring at least 5 years of experience.

Candidates will demonstrate advanced verbal and written communication, organization, and self-motivated learning, with a strong focus on regulatory compliance and cross-domain security expertise.

Formación

• 5+ years of experience in information security governance, policy, and control.
• Advanced English proficiency, written and spoken.
• Experience with security control design, development, implementation, and monitoring.
• Knowledge of software engineering best practices.
• Experience with Git, API integration, and testing.

Responsabilidades

• Demonstrate advanced verbal and written communication skills
• Utilize industry standard frameworks for information security risk management, assessment, audit, and controls (e.g., NIST, ISO, COSO, HiTrust, CMMC)
• Ensure compliance with regulatory requirements (e.g., PCI, GDPR, HIPPA, Privacy, CCPA)
• Utilize GRC tools and technologies to support assessment/audit processes (e.g., RSA Archer, Security Scorecard, Risk Recon)
• Identify weaknesses in security controls by gathering information from various sources
• Design, develop, implement, and monitor security controls
• Have expertise across multiple information security domains

Conocimientos

Advanced verbal and written comms

Team collaboration

English proficiency

Self-motivated learning

Educación

Bachelor's degree in CS/Engineering or related field

Herramientas

RSA Archer

Security Scorecard

Risk Recon

Git

API integration

Descripción del empleo

Oceans Code Experts is seeking a Senior Associate in Information Security Governance, Policy & Control to join our team. The role focuses on working with GRC, risk management, and security controls, requiring at least 5 years of experience.

Candidates will demonstrate advanced verbal and written communication, organization, and self-motivated learning, with a strong focus on regulatory compliance and cross-domain security expertise.