Security & Compliance Analyst

Salesloft, Inc.; United States; Remote; USD 70,000 - 110,000; Full time

Job summary

Salesloft, Inc. is seeking a Security & Compliance Analyst for a Mexico remote role on our Governance, Risk & Compliance team. You will own questionnaire processes, maintain a knowledge base, and support the Trust Portal with customer-facing collateral.

You will contribute to ISO 27001, SOC 2, GDPR programs, coordinate with auditors, and help drive training and risk management across the organization.

Qualifications

• 3+ years of experience in information security, GRC, compliance, or a related field.
• Experience handling security questionnaires or working within a questionnaire management process.
• Familiarity with maintaining documentation, knowledge bases, or content libraries.
• Working knowledge of ISO 27001, SOC 2 Trust Services Criteria, GDPR, and other common security standards.
• Strong written communication skills, with the ability to translate security concepts into clear, accessible language.
• Comfortable joining customer-facing calls and supporting security conversations.
• Highly organized with strong attention to detail; collaborative and comfortable in a support role.
• Ability to handle proprietary and sensitive information with discretion; CISA or similar certification is a plus.

Responsibilities

• Own the end-to-end security questionnaire process, triaging, completing, and tracking inbound customer and prospect questionnaires with speed and accuracy.
• Maintain a centralized knowledge base of approved security answers and use questionnaire automation tools to scale response capacity without sacrificing quality.
• Build and maintain the public-facing Trust Portal and reusable customer-facing collateral, including one-pagers, FAQs, security overviews, and data flow documentation.
• Support compliance activities across ISO 27001, SOC 2, GDPR, and other applicable frameworks, including coordinating evidence collection with third-party auditors and internal control owners.
• Assist with recurring security program activities, including user access reviews, policy maintenance, and control audits.
• Help identify, document, and track security and privacy risks with departmental stakeholders, and support the security awareness training program by maintaining and distributing training content.

Skills

InfoSec experience

GRC/compliance

Security questionnaires

Documentation mgmt

ISO 27001

SOC 2

GDPR

Written communication

Job description

Job Title:

Security & Compliance Analyst

Job Location:

• Mexico Remote — This is a remote opportunity based in Mexico.

ABOUT THE COMPANY:

the company is building the next era of enterprise revenue — one where teams make confident decisions powered by AI and real signals. By combining our scale, insights, and AI innovation, we're building the industry's first Predictive Revenue System, enabling humans and AI to work together to make smarter decisions and drive consistent growth.

With thousands of customers using our platforms every day, we have an unmatched view into how revenue is actually won — the Revenue Context that reveals what happens, when, and with what outcome. This gives us a unique opportunity to transform an entire category and set a new benchmark for how modern revenue teams operate.

Join us to help transform how companies around the world run revenue — and build the platform that will guide leading revenue teams into the future.

THE OPPORTUNITY:

Every customer and prospect who evaluates the company asks the same question: can we trust this platform with our data? As a Security & Compliance Analyst on our Governance, Risk & Compliance (GRC) team, you will own the written and operational work that answers that question — and keeps the answer fast, accurate, and credible.

This is a role for someone who thrives on bringing order to complexity. You'll keep our security program visible and scalable, making sure customers, prospects, and internal stakeholders have the information they need to trust the company's security program.

On a day-to-day basis, you will:

• Own the end-to-end security questionnaire process, triaging, completing, and tracking inbound customer and prospect questionnaires with speed and accuracy

• Maintain a centralized knowledge base of approved security answers and use questionnaire automation tools (e.g., Conveyor, Vanta, Drata, or similar) to scale response capacity without sacrificing quality

• Build and maintain the public-facing the company Trust Portal and reusable customer-facing collateral, including one-pagers, FAQs, security overviews, and data flow documentation

• Support compliance activities across ISO 27001, SOC 2, GDPR, and other applicable frameworks, including coordinating evidence collection with third-party auditors and internal control owners

• Assist with recurring security program activities, including user access reviews, policy maintenance, and control audits

• Help identify, document, and track security and privacy risks with departmental stakeholders, and support the security awareness training program by maintaining and distributing training content

This role lives at the heart of how we Lead From the Front: you'll automate what's manual and prototype better answers before polishing them. And in the spirit of how we Make Your Mark, you'll treat questionnaires, collateral, and the Trust Portal like products — building documentation and systems that scale and stand on their own.

WHAT WE ARE LOOKING FOR:

We are seeking a detail-oriented, collaborative security professional who is comfortable operating in a support capacity — keeping the team organized, customers informed, and compliance activities on track. You don't need to be the most senior person in the room; you need to be reliable, thorough, and proactive.

You embody what we call Evidence Over Ego — you back your answers with documented evidence rather than assumption, and you are candid when something isn't yet true or isn't yet documented. You bring systems thinking to everything you touch, fixing the root cause of a recurring questionnaire gap instead of answering it one more time.

If you want to build your career in GRC alongside a team that depends on your reliability, this is the right move.

THE TEAM:

Our GRC team is made up of seasoned and up-and-coming compliance and security professionals who keep the company's security program credible to customers, auditors, and internal partners alike.

The team Moves as One — one group grounded in mutual trust and shared ownership, where tension is named directly instead of worked around. And we are relentlessly Customer-Inspired: every decision traces back to a single question — does this make our customer more successful?

THE SKILL SET:

• 3+ years of experience in information security, GRC, compliance, or a related field

• Experience handling security questionnaires or working within a questionnaire management process

• Familiarity with maintaining documentation, knowledge bases, or content libraries

• Working knowledge of ISO 27001, SOC 2 Trust Services Criteria, GDPR, and other common security standards

• Strong written communication skills, with the ability to translate security concepts into clear, accessible language

• Comfortable joining customer-facing calls and supporting security conversations

• Highly organized with strong attention to detail; collaborative and comfortable in a support role

• Ability to handle proprietary and sensitive information with discretion; CISA or similar certification is a plus

BENEFITS:

For more information about our company's comprehensive benefits please visit: https://salesloftbenefits.com/

At the company, we are committed to creating an inclusive and supportive workplace where everyone belongs and can thrive. We focus on culture add, not culture fit, and believe our teams are made stronger by the unique perspectives, experiences, and identities each person brings.

We are proud to be an Equal Opportunity Employer and provide employment opportunities to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, pregnancy, or any other characteristic protected by law.

#LI-Remote

Please note that all official communication regarding job opportunities at the company will come from an @the company.com email address. If you receive messages on LinkedIn or other job platforms claiming to be from the company, they may not be legitimate. To verify the authenticity of any job-related communication, please visit our official Careers Page.

*We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, notetaking, or summarizing responses. These tools assist our recruitment team but do not replace human judgment — all hiring decisions are made by people. If you would like more information about how your data is processed or prefer to opt out of any AI-assisted tools, please let your recruiter know. Opting out will not impact your experience or consideration.*