Vanta Consultant (Freelance/Contractor) Remote in Mexico or USA

Nearshore Cyber; Región Centro, Monterrey, Santiago de Querétaro, Oaxaca de Juárez; Híbrido; USD 69.000 - 138.000; A tiempo parcial

Descripción de la vacante

Nearshore Cyber is seeking a Vanta Consultant (contractor) to implement Vanta for private-sector clients and build resilient GRC programs that endure after auditors depart.

The role involves guiding clients through SOC 2, ISO 27001, and related attestations, while delivering ongoing managed-compliance work on a remote, project-based basis.

Formación

• Hands-on experience implementing Vanta and developing GRC programs for private-sector organizations.
• Fluency in Spanish and English, spoken and written.
• Residence in Mexico or the United States.
• Set up to contract independently: 1099 or corp-to-corp in the US; in Mexico, RFC with CFDI invoicing.

Responsabilidades

• Implement Vanta for private-sector clients: scope frameworks, connect integrations, configure controls, close gaps
• Use Vanta to build GRC programs that hold up after the auditor leaves - policies, evidence collection, vendor and personnel workflows
• Guide clients through SOC 2, ISO 27001, and similar attestations
• Support ongoing managed-compliance work after go-live

Conocimientos

Vanta implementation

GRC program development

SOC 2 / ISO 27001

Bilingual Spanish/English

Descripción del empleo

Vanta Consultant (Contractor)

Nearshore Cyber | Remote | Part-time, project-based | $50-$100 USD per hour

Nearshore Cyber is a cybersecurity services firm and Vanta partner working with clients in Mexico and the United States. We help companies implement Vanta and run working GRC programs on it: SOC 2, ISO 27001, and the cross-border compliance that comes with operating in both countries.

We are building a bench of independent consultants to deliver Vanta engagements as they arise. This is not a full-time job. Work is periodic and project-based, billed hourly at $50 to $100 USD depending on the engagement, and always remote.

What you'll do

• Implement Vanta for private-sector clients: scope frameworks, connect integrations, configure controls, close gaps
• Use Vanta to build GRC programs that hold up after the auditor leaves - policies, evidence collection, vendor and personnel workflows
• Guide clients through SOC 2, ISO 27001, and similar attestations
• Support ongoing managed-compliance work after go-live

What we require

• Hands-on experience implementing Vanta and using it to develop GRC programs for private-sector organizations. We will ask for specifics.
• Fluency in Spanish and English, spoken and written
• Residence in Mexico or the United States
• Set up to contract independently: 1099 or corp-to-corp in the US; in Mexico, an active RFC with the ability to issue CFDI invoices, personally or through your own company

Preferred locations

Mexico City, Guadalajara, Monterrey, Querétaro, Oaxaca de Juárez, or the Dallas-Fort Worth area. The work is remote regardless; these are where our clients and community cluster.

Helpful, not required

• Certifications such as CISA, CISSP, or ISO 27001 Lead Implementer
• Experience with venture-backed startups and fintechs
• Familiarity with Mexican data-protection law (LFPDPPP)