Senior GRC Security Specialist (Cybersecurity)

Location: Remote, Colombia

Company

CI&T is a technology transformation company helping large enterprises apply AI, modernize applications, and deliver integrated business solutions.

What you will do

• Identify, log, and analyze control nonconformities and unresolved or high-risk vulnerabilities.
• Maintain the enterprise cybersecurity risk registry and provide risk treatment updates and reports.
• Conduct annual third-party cybersecurity risk assessments.
• Maintain and improve the cybersecurity control framework, collect evidence, identify gaps, and align overlapping requirements.
• Develop and maintain cybersecurity policies and procedures in line with regulatory and contractual standards.
• Support internal and external audits with relevant documentation.

Requirements

• Must be located in Colombia.
• Advanced English required for communication with international clients.
• Strong understanding of GRC frameworks, industry standards, and regulatory requirements.
• Experience conducting cybersecurity risk assessments, identifying vulnerabilities, and recommending mitigation strategies.
• Strong analytical, problem-solving, communication, and documentation skills.
• Ability to collaborate with technical and non-technical stakeholders and work independently.

Nice to have

• Experience with HITRUST, HIPAA, or Spain ENS certification requirements.
• Experience in the medical device sector.

Culture & Benefits

• Remote home-office work.
• Premium healthcare and life insurance.
• Meal voucher and mobile services subsidy.
• Maternity and parental leave, sick pay, and paid vacations.
• Colombian holidays and access to CI&T University.
• Diverse, inclusive, and safe work environment.