Security Compliance Analyst
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 23h ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 20d ago
The date the source published, not the day we noticed it (2026-08-26). Last seen at its source 2h ago.
Is it remote?
Marked remote on the employer's board
Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.
Who may apply?
Mexico, Argentina, Costa Rica, Brazil, Colombia, Uruguay
The description states no restriction of its own. This is the source's own tag.
Pay not stated
Similar roles pay $140.2k–210.6k/yr
Middle 50% of 200 listings that do state pay — Legal & Compliance · all levels · Americas · USD/year. This employer has published no salary; this is what comparable listings we hold disclose, never converted between currencies or periods. How this is calculated.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
workable employer's own board first seen 11d ago · last seen 2h ago
The listing
As the Security Compliance Analyst, you will manage security, compliance, and customer assurance programs. You will work directly with the VP of Information Security & Compliance on customer security questionnaires, SOC 2 and other audits, control testing, evidence collection, vendor assessments, and compliance initiatives including CMMC and NIST 800-171. This is a hands-on, technically self-sufficient role, not a policy-only or checklist-driven GRC position.
Responsibilities
- Complete customer security questionnaires, DDQs, RFP security sections, and related security reviews.
- Research technical questions and produce accurate, defensible answers based on the company's actual environment and controls.
- Maintain a reusable library of approved questionnaire responses and supporting evidence.
- Recognize when an existing answer applies, when something has changed, and when a subject-matter expert genuinely needs to be involved.
- Participate in customer security calls when deeper technical or compliance discussions are required.
- Help make the customer assurance process faster without sacrificing accuracy.
- Track findings, exceptions, remediation activities, and control-owner commitments through completion.
- Manage deadlines, maintain and report status, and escalate as needed.
Requirements
- 3+ years of relevant experience across IT, security, GRC, compliance, cloud operations, systems administration, or a similar field.
- Solid understanding of common security concepts.
- Hands-on experience with security compliance work, audit evidence, security questionnaires, or control testing.
- Excellent spoken English, with the ability to participate confidently in meetings with U.S.-based customers, auditors, and internal teams.
- Strong organizational skills and attention to detail, with the ability to manage multiple questionnaires, audit requests, and deadlines simultaneously.
- Hands-on experience administering Windows and cloud-based architectures, including IT Tier 2 or systems administration work.
- Comfortable investigating technical systems directly (for example, AWS, identity platforms, endpoint-management tools, GitHub, ticketing systems) to retrieve evidence rather than relying on Engineering or IT for every request.
- Working knowledge of scripting or automation (for example, PowerShell) to operate efficiently at scale.
- Ability to write clear, accurate technical documentation.
Benefits
- Compensation: $2000 to $3000
- Schedule: U.S. business hours
- PTO: Choice of following the U.S. holiday calendar or your home country's calendar.
- Health & Equipment: Healthcare reimbursement eligibility after 90 days; a device stipend of up to $1,500, or reimbursement if you use your own equipment.