Security consultant - level ii (3-5 years)

Descripción del cargo

The Compliance Assurance Analyst is responsible for planning, executing, and maintaining internal cybersecurity and IT control assessments across global on-premises, cloud, and hybrid environments. The role evaluates the design and effectiveness of security controls, ensures alignment with industry frameworks (NIST CSF, CIS Controls, PCI DSS), and delivers clear, audit-ready assessment reports that support regulatory compliance and risk management.
Working with minimal supervision, this position collaborates closely with infrastructure, cloud, application, and security operations teams to validate controls, track remediation, and maintain high-quality evidence within GRC platforms such as AuditBoard. The analyst also supports internal and external audits, advises stakeholders on control expectations, and contributes to the continuous improvement of assurance methodologies.
Key focuses include:

Conducting cybersecurity and IT control assessments.
Mapping controls to recognized frameworks and maintaining traceability.
Managing documentation, evidence, and assessment artifacts.
Partnering with technical teams and providing compliance guidance.
Supporting audits and mentoring junior analysts.

Required capabilities:
Strong knowledge of network, endpoint, logging/monitoring, and cloud security (AWS, Azure, GCP), experience with GRC tools, analytical thinking, clear communication, and the ability to manage multiple assessments independently.