Security Compliance Analyst

Masabi

. Own assigned security control processes end to end, including planning, execution, evidence gathering and follow-up on findings .

Posted 9/28/2026full-timeRemote • ColombiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security control processes, including risk management, compliance with ISO 27001, SOC 2, and PCI DSS, and effective communication in English. Proficient in automating control processes and conducting thorough vendor security assessments.

Highest-signal resume keywords

Security Control ManagementThird-Party Risk ManagementISO 27001 ComplianceData Protection KnowledgeCompliance Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityIT ComplianceAccess ControlRisk ManagementData ProtectionSecurity AuditsVendor Security AssessmentsScriptingLow-Code ToolsCompliance Automation

Soft Skills

Clear WritingInformation StructuringTask ManagementDeadline Management

Tools & Technologies

JiraConfluenceGRC PlatformsAI ToolsCloud ServicesSaaS Tools

Certifications & Qualifications

ISO 27001SOC 2PCI DSSCyber Essentials

Industry Keywords

Risk TrackingSupplier AssessmentsSecurity Posture ReviewsCustomer Security QuestionnairesGDPRNIST

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own assigned security control processes end to end, including planning, execution, evidence gathering and follow-up on findings
Perform manual and tool-based security controls
Carry out user access and other regular reviews, recording results and actions
Run the Third-Party Risk Management process, including supplier assessments, security posture reviews, risk tracking and reassessments
Maintain supplier, risk, asset and data processing registers
Analyse security and privacy requirements in bids and tenders
Prepare clear and accurate responses with the wider team
Respond to customer security questionnaires and information requests
Support ISO 27001, SOC 2, PCI DSS and Cyber Essentials audits and certifications
Automate and improve control processes, including through AI tools

Requirements

What you’ll need

Only candidates based in Colombia will be considered
Advanced level of English (B2 or higher)
Some hands-on experience in information security, IT compliance, internal control, audit, or a similar field
Working understanding of access control, risk management, and data protection
Curiosity about technology, including systems, cloud services, and SaaS tools
Clear writing and ability to structure information well
Ability to manage recurring tasks and multiple deadlines
Experience with Third-Party Risk Management or vendor security assessments (nice to have)
Knowledge of ISO 27001, SOC 2, PCI DSS, GDPR or NIST (nice to have)
Experience supporting RFPs, tenders or customer security questionnaires (nice to have)
Experience with compliance automation or GRC platforms (nice to have)
Interest in scripting, low-code tools such as n8n or Make, or AI workflow improvement (nice to have)
Experience with Jira or Confluence (nice to have)

Benefits

Comp & perks

15 days paid vacation per year plus 18 public holidays
Private Healthcare
Monthly team bonding allowance
Menopause support
Choice of a workstation
Ability to work for up to 3 months per year from any country in the world
Fun and collaborative environment with a focus on making a difference in the world
Training allowance of up to $750 USD per year
$250 USD to spend on your home office every year
Fully remote model