Remote Information Security Analyst — Vendor Risk & GRC

Scale Up Recruiting Partners; Madrid; Presencial; EUR 60.000 - 95.000; Jornada completa

Descripción de la vacante

Scale Up Recruiting Partners is assisting a U.S.-based cybersecurity client to hire an Information Security Analyst on a contract basis. The role owns the vendor security questionnaire process across multiple client accounts, coordinating with U.S.-based startups and handling security questionnaires (SIG/CAIQ) using platforms like OneTrust and Whistic.

You will monitor requests, manage tickets in Jira/Linear, maintain knowledge bases, and collaborate with security consultants and engineers to

Formación

• 2–4 years in vendor security questionnaires or GRC/compliance in a client-facing role.
• Hands-on experience with SIG, CAIQ, or custom vendor questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Understanding of security concepts: SSO, MFA, Endpoint Management, Encryption, Cloud basics, Backup/DR, Vendor Risk.
• Strong organizational skills to manage multiple requests.
• Good judgment on when to involve technical SMEs.
• Excellent written communication and professional English.

Responsabilidades

• Monitor client Slack channels and respond to incoming security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other ticketing systems to track requests through completion.
• Complete vendor security questionnaires (SIG, CAIQ, or custom questionnaires) through spreadsheets and security platforms such as OneTrust, Whistic, SecurityScorecard, and similar tools.
• Develop a deep understanding of each client's security posture, policies, controls, and technical environment.
• Maintain and continuously improve client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and SMEs for technical clarification.
• Escalate recurring gaps or missing controls that impact questionnaire responses.
• Ensure all questionnaires are completed accurately and within customer deadlines.

Conocimientos

Vendor questionnaires

GRC/Compliance

SOC 2 knowledge

ISO 27001 knowledge

Stakeholder coordination

Written communication

English proficiency

Herramientas

Jira

Linear

OneTrust

Whistic

SecurityScorecard

Descripción del empleo

Scale Up Recruiting Partners is assisting a U.S.-based cybersecurity client to hire an Information Security Analyst on a contract basis. The role owns the vendor security questionnaire process across multiple client accounts, coordinating with U.S.-based startups and handling security questionnaires (SIG/CAIQ) using platforms like OneTrust and Whistic.

You will monitor requests, manage tickets in Jira/Linear, maintain knowledge bases, and collaborate with security consultants and engineers to