Security & Compliance Analyst (Cybersecurity)

Location: Remote from Colombia or Mexico

Company

hirify.global is a technology-enabled growth agency helping fast-growing companies generate sustainable revenue through content, SEO, and AEO.

What you will do

• Monitor and triage security alerts, escalating confirmed issues.
• Coordinate incident response from triage through post-mortems and run tabletop exercises.
• Triage security advisories and vulnerabilities, tracking remediation against SLAs.
• Maintain encryption, key and certificate management, and secrets rotation controls.
• Review AWS and GCP infrastructure configurations against security policies and follow up on remediation.
• Run vulnerability scans, backup restores, access reviews, SOC 2 evidence collection, vendor security reviews, client security questionnaires, and GDPR activities; report on open security and compliance items.

Requirements

• 3–5 years of experience in a security operations, cybersecurity, or security engineering role.
• Working knowledge of SOC 2, GDPR, and audit processes.
• Hands-on experience with log analysis, vulnerability management, and incident response, including post-mortems.
• Working knowledge of encryption, key management, and certificate management.
• Experience securing cloud infrastructure on AWS and GCP.
• Excellent written and verbal English communication skills.

Nice to have

• Experience with Vanta or a similar compliance platform.
• Security+, CySA+, CISSP, or Associate of ISC2 certification.

Culture & Benefits

• Fully distributed team across the US, Canada, Latin America, and Europe.
• Autonomy, full ownership, and flexible processes.
• Flexible paid time off.
• Healthcare coverage and education opportunities.
• Opportunity to work on enterprise-grade compliance, audit and certification, AI governance, and repeatable security processes.