Security Compliance Analyst
Masabi · Remote · Colombia ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (Colombia)
- Security Compliance
- ISO 27001 & SOC 2
- Third-Party Risk Mgmt
- Automation focus
Join the Security team at Masabi, where you will ensure the consistent execution of security controls for a global mobile ticketing platform. You will own control processes, manage third-party risk, and support commercial teams with security inquiries while exploring automation opportunities.
What you'll do
- Own assigned security control processes from planning to resolution
- Perform manual and tool-based security controls to close gaps
- Conduct regular user access reviews and record actions
- Manage Third-Party Risk Management activities and supplier assessments
- Maintain accurate security and privacy registers
- Analyze security requirements for bids and tenders
- Respond to customer security questionnaires and information requests
- Support audits such as ISO 27001, SOC 2, and PCI DSS
- Identify opportunities to automate control processes using AI
What you'll need
- Hands-on experience in information security or IT compliance
- Practical experience preparing evidence for audits like ISO 27001 or SOC 2
- Working understanding of access control and risk management
- Detail-oriented with strong organizational skills
- Curious about technology and how SaaS tools integrate
- Clear writing skills for documentation and questionnaire answers
- Comfortable taking ownership and asking questions when needed
Nice to have
- Experience with Third-Party Risk Management or vendor assessments
- Knowledge of GDPR, NIST, or mapping controls across frameworks
- Experience supporting RFPs or customer security questionnaires
- Hands-on experience with GRC platforms or compliance automation
- Interest in scripting, low-code tools, or AI for workflow improvement
- Familiarity with Vanta, AWS, Jira, or Confluence
- Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor
- Background in SaaS, payments, or public transport sectors
Stack
- Vanta
- AWS
- Jira
- Confluence
- n8n
- Make
How you'll work
- Fully remote model
- Must be based in Colombia
- Work up to 3 months per year from any country
What you get
- 15 days paid vacation plus 18 public holidays
- Private healthcare coverage
- Monthly team bonding allowance
- Menopause support resources
- Choice of workstation equipment
- $750 USD annual training allowance
- $250 USD annual home office budget