Security & Compliance Analyst

Job not on LinkedIn

🔥 5 minutes ago

🌐 Colombia, Mexico – Remote

🇨🇴 Colombia – Remote 🇲🇽 Mexico – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Graphite

WebsiteLinkedInAll Job Openings

51 - 200 employees

🤝 B2B

💼 Consulting

📣 Marketing

B2B • Consulting • Marketing

Graphite is a growth agency that builds SEO and content strategies for companies like Netflix, MasterClass, and Robinhood. They focus on developing scalable growth engines to enhance the online presence and impact of their clients.

📋 Description

• Monitor and triage security alerts, and escalate real issues • Coordinate incident response from triage through post-mortem • Run tabletop exercises • Triage security advisories and vulnerabilities • Track patching against remediation SLAs • Maintain technical security controls, including encryption, key and certificate management, and secrets rotation • Review cloud and infrastructure configurations against security policies and follow up on fixes • Run vulnerability scans, backup restores and access reviews • Collect SOC 2 evidence, including for failing Vanta tests • Support vendor security reviews, client security questionnaires and GDPR work • Report on alerts, vulnerabilities and open compliance items • Work with Engineering, IT and Legal; report to the Director of Legal

🎯 Requirements

• 3 to 5 years in a security operations, cybersecurity or security engineering role • Working knowledge of SOC 2 and GDPR and audit processes • Hands-on experience with log analysis, vulnerability management and incident response, including post-mortems • Working knowledge of encryption and key and certificate management • Experience securing cloud infrastructure on AWS and GCP • Excellent written and verbal English communication skills • Experience with Vanta or a similar compliance platform is nice to have • Security+, CySA+ or CISSP (or Associate of ISC2) certification is nice to have

🏖️ Benefits

• Iterative, empowering processes • Full ownership and agency to drive projects forward • Flexible work environment in a distributed team • Competitive pay • Flexible PTO • Quality healthcare coverage • Education opportunities