Oceans Code Experts
AX-14 Sr. Associate, Information Security Governance, Policy & Control
Senior Associate focused on information security governance, policy, and control: assessing and auditing risks, ensuring regulatory compliance (PCI, GDPR, HIPAA), and designing and monitoring security controls using GRC tools and frameworks like NIST, ISO, and HiTrust. Fully remote, full-time consulting role based in Colombia.
- Compensation
- Not disclosed
- Location
- Colombia
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience
- 5+ years of experience in information security governance, policy, and control
- Advanced English proficiency, written and spoken
- Experience with security control design, development, implementation, and monitoring
- Knowledge of software engineering best practices
- Strong collaboration and communication skills
- Experience with Git, API integration, and testing
Nice to have
- CISA, CRISC, CISM, or CISSP certifications
- Demonstrated experience across multiple information security domains
- Experience with information security risk management frameworks (NIST, ISO, COSO, HiTrust, CMMC)
- Experience with regulatory requirements (PCI, GDPR, HIPPA, etc.)
- Experience using GRC tools and technologies (RSA Archer, Security Scorecard, Risk Recon)
Full description
Job Summary
Oceans Code Experts is looking for a Senior Associate in Information Security Governance, Policy & Control to join our team. This role involves working with technologies such as GRC, Risk Management, and Security Controls, requiring at least 5 years of experience. As a Senior Associate, you will be responsible for advanced verbal and written communication, organization, and self-motivated learning.
Job Responsibilities
- Demonstrate advanced verbal and written communication skills
- Utilize industry standard frameworks for information security risk management, assessment, audit, and controls (e.g., NIST, ISO, COSO, HiTrust, CMMC)
- Ensure compliance with regulatory requirements (e.g., PCI, GDPR, HIPPA, Privacy, CCPA)
- Utilize GRC tools and technologies to support assessment/audit processes (e.g., RSA Archer, Security Scorecard, Risk Recon)
- Identify weaknesses in security controls by gathering information from various sources
- Design, develop, implement, and monitor security controls
- Have expertise across multiple information security domains
Job Requirements
- Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience
- CISA, CRISC, CISM, or CISSP certifications preferred
- 5+ years of experience in information security governance, policy, and control
- Advanced English proficiency, written and spoken
- Experience with security control design, development, implementation, and monitoring
- Knowledge of software engineering best practices
- Strong collaboration and communication skills
- Experience with Git, API integration, and testing
Nice to Have
- Demonstrated experience across multiple information security domains
- Experience with information security risk management frameworks
- Experience with regulatory requirements (PCI, GDPR, HIPPA, etc.)
- Experience using GRC tools and technologies
Position Type and Expected Hours of Work
- Full-time consulting position
- Up to 40 hours per week
- Flexible core hours
- Hybrid