Security Compliance Specialist

Position Overview

The Security Compliance Specialist is responsible for ensuring ongoing compliance with security frameworks and privacy regulations including ISO 27001, SOC 2, NIST, CIS, GDPR and other related requirements. This hands-on technical role involves gathering, analyzing, and validating compliance evidence from IT systems, applications, and security tools.

Responsibilities

• Operate and maintain security compliance processes across multiple frameworks.
• Collect, analyze, and validate technical compliance evidence.
• Utilize SIEM and monitoring tools such as Splunk to review logs.
• Support internal and external audits with evidence preparation and stakeholder coordination.
• Engage in security control testing, system hardening reviews, and baseline validations.
• Collaborate with various teams to integrate compliance requirements into projects.
• Assist in customer security questionnaires and due diligence requests.
• Maintain documentation of compliance processes and audit history.
• Monitor regulatory changes and recommend control updates.
• Develop metrics and reports on compliance status for leadership review.

Required Skills and Experience

• 3-5 years in IT administration, security operations, or compliance roles.
• In-depth knowledge of ISO 27001, SOC 2, NIST CSF, CIS, GDPR.
• Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar, Elastic).
• Background in system administration across Windows, Linux or cloud environments.
• Familiarity with cybersecurity domains: access control, logging/monitoring, vulnerability management, and incident response.
• Ability to prepare compliance evidence and support audits successfully.
• Strong analytical, problem-solving and communication skills.
• Relevant certifications (e.g., CompTIA Security+, CISSP, CISM, ISO 27001 Lead Implementer/Auditor).
• Fluency in Spanish and English is mandatory.

Key Technologies

• SIEM Platforms: Splunk, Microsoft Sentinel, QRadar, Elastic.
• System Administration: Windows Server, Active Directory, Linux, cloud platforms (AWS, Azure, Oracle).
• Vulnerability & Compliance Tools: Qualys, Tenable, CIS benchmark tools.
• Other Platforms: SharePoint, Confluence, ServiceNow.

Benefits & Work Environment

Work with a top Managed Cloud Provider serving large enterprise clients. Enjoy flexible working hours, work from abroad possibilities, attractive benefits including health offers, modern office environments with relaxing spaces, and continuous career development with internal training and certifications.

Key skills/competency

• ISO 27001
• SOC 2
• NIST
• CIS
• GDPR
• SIEM
• Compliance
• Audit
• System Administration
• Security Controls