Security and Compliance Officer

About the role

We are looking for a strategic Security and Compliance Officer to lead our information security management, protect critical digital assets, and ensure strict adherence to international security standards. The role bridges high‑level compliance framework implementation with hands‑on technical execution.

Key responsibilities

• Design, implement, maintain, and certify the company’s ISMS under ISO 27001.
• Manage alignment with SOC 2, GDPR, ISO 27701, and ISO 42001.
• Perform penetration testing, secure coding, and infrastructure hardening on production services.
• Conduct risk and vulnerability assessments across departments.
• Oversee data protection, privacy compliance, and database security.
• Author and enforce information security and digital privacy policies.
• Provide technical and strategic cybersecurity guidance for cloud and physical infrastructure.

Required profile

• Bachelor’s degree in Systems Engineering or related field; postgraduate specialization in Information Security preferred.
• 4+ years of experience in security and compliance roles, preferably in fast‑growth tech environments.
• Professional proficiency in English and native or fluent Spanish.
• Continuous learning mindset and strong leadership communication skills.

Required skills

• Penetration testing
• Secure coding / programming
• Infrastructure hardening
• Google Cloud Platform (GCP)
• AWS Security and IAM
• Large Language Model security
• ISO 27001, SOC 2, GDPR knowledge
• OWASP methodologies
• DevSecOps practices
• Networking security