Remote InfoSec Analyst: Vendor Security & Compliance

Scale Up Recruiting Partners; Barcelona; Presencial; EUR 83.000 - 124.000; Jornada completa

Descripción de la vacante

Scale Up is assisting a fast-growing U.S.-based cybersecurity firm by identifying an Information Security Analyst to own the vendor security questionnaire process end-to-end for multiple client accounts. You will monitor requests from startups, coordinate with technical stakeholders, and complete questionnaires accurately and on time.

This role requires knowledge of security frameworks, strong organization, and clear communication with both technical and non-technical teams.

Formación

• 2–4 years of experience completing vendor security questionnaires or in a security-facing role.
• Hands-on experience with SIG, CAIQ, or custom vendor questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Excellent written communication and professional English (spoken and written).

Responsabilidades

• Monitor client Slack channels and respond promptly to security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other systems to track requests to completion.
• Complete vendor security questionnaires through spreadsheets and platforms such as OneTrust or Whistic.
• Develop understanding of each client’s security posture, policies, controls, and tech environment.
• Maintain and improve client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and SMEs for technical clarification.
• Escalate gaps or missing controls impacting questionnaire responses.
• Ensure all questionnaires are completed accurately within deadlines.

Conocimientos

GRC/compliance

Vendor risk assessment

Security questionnaires

Herramientas

Jira

Linear

OneTrust

Whistic

SecurityScorecard

Conveyor

SafeBase

Vanta

Descripción del empleo

Scale Up is assisting a fast-growing U.S.-based cybersecurity firm by identifying an Information Security Analyst to own the vendor security questionnaire process end-to-end for multiple client accounts. You will monitor requests from startups, coordinate with technical stakeholders, and complete questionnaires accurately and on time.

This role requires knowledge of security frameworks, strong organization, and clear communication with both technical and non-technical teams.