Loading...
Mid LevelFull-timeRustAWSCI/CDData
Salary Range
$102,000 - $138,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
Key Responsibilities
- →Execute audit preparation for SOC 2, ISO 27001, and PCI DSS certifications, including evidence collection, control documentation, and coordination with stakeholders.
- →Maintain compliance documentation using the SCF methodology.
- →Track regulatory changes in jurisdictions where the company operates and assess their impact on existing controls.
- →Prepare compliance reports for leadership and regulatory bodies.
- →Support technology implementations related to AML/KYC compliance.
- →Perform risk assessments to identify compliance gaps and remediation priorities.
- →Extend vulnerability management beyond AWS to include on-premise and SaaS environments.
- →Analyze the security posture of third parties and vendors through due diligence assessments.
- →Support Business Impact Analysis (BIA) and Business Continuity Plan (BCP) testing.
- →Implement IAM controls, including access reviews and privilege management.
- →Support centralized logging and develop use cases in SIEM.
- →Execute incident response procedures and contribute to post-incident analysis.
- →Maintain asset inventory in cloud, on-premise, and SaaS environments.
- →Coordinate with engineering teams to integrate security into SDLC processes.
- →Develop and deliver role-based security awareness training.
- →Create security documentation and guidelines for engineering teams.
- →Build pre-approved security libraries and tool documentation.
Requirements
- ✓2 to 4 years of experience in IT security, compliance, or risk management.
- ✓Direct experience with SOC 2, ISO 27001, PCI DSS, or NIST frameworks.
- ✓Experience in fintech or regulated industries is desirable.
- ✓Cloud security principles (preferably AWS: IAM, CloudTrail, Security Hub).
- ✓Vulnerability management tools and processes.
- ✓Identity and access management (IAM) concepts.
- ✓Fundamentals of network security, encryption, and data protection.
- ✓Excellent written and verbal communication skills in Spanish and English.
- ✓Ability to translate technical concepts to non-technical audiences.
- ✓High level of attention to detail and strong documentation skills.
- ✓Collaborative mindset aligned with a culture of continuous improvement.
Free to sign up. Takes 30 seconds.
