HireLATAM

Remote Cybersecurity Risk Management Senior Analyst

HireLATAM  •  Remote  •  8 days ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

HireLatam is a premier recruitment agency that places top Latin American talent in independent contractor roles in US companies. With a proven track record and a commitment to excellence, we're your trusted partner in the pursuit of career success. Our extensive network, personalized approach, and supportive guidance ensure that you're in the best hands to find your next job opportunity.

Job Title: Remote Cybersecurity Risk Management Senior Analyst (100% Work From Home)

Location: Remote from Latin America

Position Type: Full-time

Salary $2,000 - $2,500 USD (dependent on experience)

Schedule: Will be required to work with Panama working hours, 8:00 A.M. to 5:00 P.M. or 9:00 A.M. to 6:00 P.M. Monday to Friday, except public holidays Our Client is a specialized compliance and integrated solutions firm providing high-level Governance, Risk, and Compliance (GRC) support to multinational organizations. This specific role supports one of their primary customers—a leading telecommunications giant operating extensively across Latin America and the Caribbean. Our Client operates at the forefront of enterprise security, managing complex risk landscapes across cloud, infrastructure, and third-party ecosystems.
The Role
Our Client is seeking a Cybersecurity Risk Management Senior Analyst to drive the GRC function within a large-scale enterprise environment. This is a high-impact position responsible for assessing technology risks across multiple markets and business units. The Senior Analyst will work cross-functionally with cloud, legal, audit, and technology teams to evaluate control effectiveness and document risk exposure. This role is ideal for a professional with deep analytical capabilities and practical experience navigating complex cybersecurity frameworks in a regulated industry.

Key Responsibilities

Cybersecurity Risk Assessments

  • Conducts comprehensive risk assessments for applications, infrastructure, cloud environments (SaaS/IaaS), and strategic technology initiatives.
  • Evaluates cybersecurity, operational, resiliency, and data protection risks to determine inherent and residual exposure.

  • Supports risk treatment planning and tracks remediation activities to ensure security gaps are closed.

Third-Party & Vendor Risk Management

  • Leads cybersecurity due diligence for vendors, reviewing SOC reports, ISO certifications, and penetration testing summaries.

  • Identifies security gaps in third-party environments and provides actionable mitigation recommendations.

  • Monitors ongoing vendor security posture and supports the onboarding of new service providers.

Governance, Reporting & Compliance

  • Maintains and updates enterprise cybersecurity risk registers, ensuring all risks are prioritized and assigned.

  • Develops executive-level risk metrics, dashboards, and Key Risk Indicators (KRIs) for technical and non-technical stakeholders.

  • Supports internal and external audits, assisting with evidence collection and documentation management.

  • Aligns organizational initiatives with frameworks such as ISO 27001, NIST CSF, PCI DSS, and SOC 2

Qualifications, Skills and Key Competencies


Required Qualifications

  • Education: Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or Risk Management.

  • Experience: 6+ years in cybersecurity risk management, IT audit, or security compliance.

  • Core Expertise: Mandatory experience performing cybersecurity and technology risk assessments in an enterprise environment.

  • Technical Knowledge: Strong understanding of cloud security, Identity & Access Management (IAM), vulnerability management, and data privacy.

  • Language: Professional proficiency in English (Mandatory) and Spanish.

  • Frameworks: Familiarity with ISO 27001, NIST CSF, COBIT, and PCI DSS.


Preferred Qualifications

  • Professional certifications: CRISC, CISA, CISSP, or ISO 27001 Lead Auditor

  • Experience in telecommunications, financial services, or other highly regulated sectors.

  • Proficiency with GRC platforms such as Archer, AuditBoard, or ServiceNow

  • Exposure to cyber risk quantification methodologies.

Success Metrics

  • Execution: Timely completion of high-quality risk assessment reports and documentation.

  • Remediation: Effective tracking and validation of remediation activities across the organization.

  • Collaboration: Strong partnership with technical stakeholders to improve risk visibility.

  • Maturity: Contribution to the overall growth and maturity of the cybersecurity governance framework.

Benefits

  • Enterprise Scale: Opportunity to work on massive, regional cybersecurity initiatives across multiple operating markets.

  • Professional Growth: Direct exposure to enterprise-level GRC strategy and senior leadership reporting.

  • Remote Flexibility: Dedicated professional services role with a remote/hybrid model depending on location.

  • Multicultural Environment: High-visibility role working across the Latin American and Caribbean regions.


Application Disclaimer: Please Read Before Proceeding To ensure a fair and efficient hiring process, all applications must meet the mandatory requirements listed in the job description.
Voice/Video Recording is REQUIRED
Your application CANNOT be considered without a voice or video recording. It must be at least 30 seconds long and in English Submissions in any other language or missing a recording will be automatically disqualified

Mandatory Knockout Questions
Each application includes knockout questions designed to verify minimum qualifications required by the client. If you answer "NO" to any of these, you will be immediately disqualified from the hiring process for not having the experience requested for the role. Please note that the citizenship question is also a knockout if you answer "YES" as we are only able to hire Latin American talent based in Latin America.

Apply Wisely
To maintain fairness, please apply to no more than three jobs and only if you fully meet the listed qualifications Applying to roles you don’t qualify for will not improve your chances and may affect future applications.

Check Your SPAM Folder
All important updates will be sent via email, so be sure to check your inbox and spam/junk folders to avoid missing any communication.
We appreciate your interest and look forward to reviewing your application!

HireLATAM

About HireLATAM

HireLATAM connects U.S. businesses with top-tier remote talent from Latin America. We specialize in finding skilled professionals across various industries, including software development, customer service, digital marketing, and more. Our mission is to bridge the gap between high-quality Latin American talent and U.S. companies seeking cost-effective, dedicated, and culturally aligned team members.

Whether you're looking to scale your team or need specialized expertise, HireLATAM streamlines the hiring process, ensuring you find the right fit quickly and efficiently. We handle the recruitment, so you can focus on growing your business.

Explore how nearshoring with HireLATAM can enhance your team's productivity and give your business a competitive edge.

Industry
HR & Recruiting
Company Size
51-200 employees
Headquarters
Durango, CO
Year Founded
Unknown
Social Media