Senior Information Security Policy and Controls Architect

Auxis; Bogotá ciudad; Presencial; COP 200.880.000 - 334.800.000; Jornada completa

Descripción de la vacante

Grant Thornton in Bogotá seeks a Sr Associate, Information Security Governance, Policy & Controls, to drive policy development and risk management. You will oversee controls, monitor regulatory compliance, and partner with stakeholders to protect information assets in a matrixed environment.

The role emphasizes execution, change leadership, and deep expertise in information security frameworks, risk, and audit activities, with a focus on resilience and data protection.

Formación

• Experience with information security risk management frameworks (NIST, ISO, COSO, HiTrust, CMMC).
• Experience with regulatory requirements (PCI, GDPR, HIPAA, Privacy, CCPA).
• Experience using GRC tools (RSA Archer, Security Scorecard, Risk Recon).
• Experience gathering information from multiple sources to identify security weaknesses.
• Expert in security control design, development, implementation and monitoring.
• Demonstrated experience across multiple information security domains.

Responsabilidades

• Develop or enhance information security policies, control objectives, controls and standards.
• Develop and oversee control framework to prevent violations of guidelines and policies.
• Deep functional expertise in information security policy, standards, risk & compliance.
• Collaborate with process owners to document processes, risks and controls.
• Perform control testing and compliance assessments to identify security risks.
• Support front-line controls, self-assurance, and risk assessment activities.
• Provide ongoing risk monitoring and status reporting within data governance processes.
• Coordinate with stakeholders to review assessment results and drive actions.
• Assess risk exposure and help establish policies to minimize risk.
• Assist auditors with questions and findings related to security risk management.
• Identify process improvements and promote best practices in reports and tools.

Conocimientos

English B2+ or Higher

Educación

Bachelor's degree in Computer Science, Engineering or related field or equivalent work experience

Herramientas

RSA Archer

Security Scorecard

Risk Recon

Descripción del empleo

Grant Thornton in Bogotá seeks a Sr Associate, Information Security Governance, Policy & Controls, to drive policy development and risk management. You will oversee controls, monitor regulatory compliance, and partner with stakeholders to protect information assets in a matrixed environment.

The role emphasizes execution, change leadership, and deep expertise in information security frameworks, risk, and audit activities, with a focus on resilience and data protection.