Security Compliance Analyst

About the role

Join Masabi’s Security team to manage and improve security control processes for the Justride platform, a global mobile ticketing solution. You will own end‑to‑end compliance activities, support third‑party risk management, and help automate controls using AI and scripting.

Key responsibilities

• Own assigned security control processes: plan, execute, gather evidence, and track remediation.
• Perform manual and tool‑based security controls, close gaps, and run regular user access reviews.
• Manage day‑to‑day Third‑Party Risk Management, assess suppliers, and maintain security and privacy registers.
• Respond to security questionnaires, support audits (ISO 27001, SOC 2, PCI DSS, NIST, etc.), and prepare evidence.
• Identify and implement automation opportunities for control processes using AI or low‑code tools.

Required profile

• Hands‑on experience in information security, IT compliance, internal control or audit.
• Practical experience preparing evidence for at least one recognised framework (e.g., ISO 27001, SOC 2, PCI DSS, NIST).
• Detail‑oriented, organized, and able to juggle recurring tasks and deadlines.
• Strong written communication skills for documentation and questionnaire responses.

Required skills

• Knowledge of security frameworks: ISO 27001, SOC 2, PCI DSS, NIST.
• Experience with third‑party risk management and data protection concepts.
• Familiarity with AWS, Vanta, Jira, Confluence.
• Scripting or low‑code automation tools (e.g., n8n, Make) and AI‑assisted workflow improvement.