Security Compliance Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Compliance Analyst en fintech de remesas y pagos transfronterizos. Gestionando SGSI, riesgos, auditorías y preparación para certificación ISO 27001.
Responsibilities:
- Reportar al CISO
- Crear y mantener la documentación del SGSI (políticas, procedimientos, estándares y líneas base), con control de versiones, revisión y aprobación
- Mantener la Declaración de Aplicabilidad (SoA) y la trazabilidad entre los controles del Anexo A de ISO 27001:2022, las políticas internas y la evidencia
- Acompañar el proceso de certificación ISO 27001: gap assessments, plan de cierre de brechas, preparación de evidencia y auditorías de etapa 1 y 2
- Coordinar auditorías internas y atender auditorías externas, revisoría fiscal, reguladores y due diligence de inversionistas, con seguimiento de hallazgos hasta su cierre
- Identificar y evaluar riesgos de seguridad, mantener la matriz de riesgos y dar seguimiento a los planes de tratamiento
- Probar el diseño y la efectividad de los controles y reportar indicadores del SGSI al Comité de Ciberseguridad
- Diseñar y ejecutar el plan anual de awareness: capacitaciones, inducciones de seguridad y simulaciones de phishing
- Apoyar a Compliance y Legal en reportes regulatorios y protección de datos personales
Requirements:
- Título profesional en Ingeniería de Sistemas, Informática o carreras afines
- 2 a 4 años de experiencia en GRC, auditoría de TI, seguridad de la información o riesgo tecnológico
- Experiencia práctica con ISO 27001: haber participado en la implementación, mantenimiento o auditoría de un SGSI
- Experiencia redactando políticas y procedimientos de un sistema de gestión
- Experiencia apoyando auditorías y gestionando hallazgos hasta su cierre
- Experiencia en evaluación de riesgos (matriz de riesgos y planes de tratamiento)
- Inglés técnico de lectura
- Español nativo
- Certificación ISO 27001 Lead Implementer, Lead Auditor o Internal Auditor, o certificaciones como CISA, CRISC o CISM (suma puntos)
- Experiencia en fintech, banca u otras industrias reguladas (CMF, SFC o similares) (suma puntos)
- Experiencia en un proceso de certificación ISO 27001 de principio a fin (suma puntos)
- Conocimiento de protección de datos personales (Ley 21.719, Ley 1581, GDPR) y de herramientas GRC como Vanta (suma puntos)
- Experiencia diseñando programas de awareness o campañas de phishing simulado (suma puntos)
Benefits:
- Contrato indefinido
- 40 horas/semana
- 35 días de vacaciones anuales
- Trabajo 100% remoto desde LATAM
- Días libres ilimitados
- Impacto directo en la construcción de la función de Ciberseguridad de una fintech en crecimiento
Similar Jobs
Senior Cybersecurity Analyst – AI Security
Cybersecurity Senior Analyst testing The Home Depot’s AI connectors and platforms through AI red teaming. Validating hardening requirements and translating findings into remediation guidance.
Information Security Analyst
Information Security Analyst protecting Trulieve’s cannabis operations through SOC, cloud, and endpoint security. Monitoring alerts, responding to incidents, validating controls, and supporting compliance.
Lead Analyst – Cyber Security Operations
Lead Cyber Security Analyst protecting Hyatt’s global hospitality operations and guest data. Leading incident response, threat hunting, detection engineering and AI-assisted SOC operations.
Cybersecurity Analyst I
Remote Cybersecurity Analyst I monitoring alerts and investigating incidents for Farnell, a global technology products distributor. Supporting 24/7 SOC operations and incident response.
Security Analyst – Governance, Trust
Security Analyst maintaining customer security assurance content and AI-agent governance. Supporting Chainguard, a provider of hardened open-source software, in scaling trusted security operations.
Security Analyst – Governance, Trust
Security Analyst maintaining customer trust artifacts and AI governance workflows. Supporting Chainguard’s secure, production-ready open-source software supply chain.
Cyber Security Analyst
Cyber Security Analyst protecting World Business Lenders' real estate-secured business lending systems. Monitoring alerts, investigating incidents, and improving security controls remotely.
Senior Security Analyst, MDR
Senior Security Analyst joining Artemis's MDR service, Apollo, as a founding analyst. Investigating and responding to threats across customer cloud, identity, endpoint, and SaaS environments.
Identity & Access Management Analyst – IT Security
Remote IAM Analyst managing access controls, provisioning, PAM, MFA, and compliance for Guthrie’s integrated nonprofit healthcare organization.
Compliance & Security Analyst
Compliance analyst leading CMMC 2.0 and NIST 800-171 readiness for Logicalis clients. Authoring SSPs, managing remediation, and validating audit evidence.
Information Security Compliance Analyst
Information Security Compliance Analyst strengthening Data Recognition Corporation’s security compliance program. Managing GovRAMP, NIST RMF, SOC 2 audits, risk remediation, and business continuity initiatives.
Security Analyst – Penetration Testing
Analista de segurança conduzindo testes de intrusão e avaliações de vulnerabilidades para proteger clientes digitais da Stefanini Cyber. Atuando em ambientes web, mobile, cloud, AD e IoT/OT.
Security Analyst
Security Analyst managing vulnerability scanning and exposure programs for GuidePoint Security, a cybersecurity services provider. Advising customers and deploying vulnerability infrastructure across cloud and on-premise environments.
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Senior Security Analyst, MDR
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.