Security and Compliance Officer

About the role

We are looking for a strategic Security and Compliance Officer to lead our information security management, protect critical digital assets, and ensure strict adherence to international security standards. The role bridges high‑level compliance framework implementation with hands‑on technical execution such as penetration testing, hardening, and secure architecture.

Key responsibilities

• Design, implement, maintain, and certify the company’s ISMS under ISO 27001 and align with SOC 2, GDPR, ISO 27701, and ISO 42001.
• Perform penetration testing, secure coding reviews, and infrastructure hardening for production services.
• Conduct risk and vulnerability assessments across departments and digital initiatives.
• Oversee data protection, privacy compliance, and database publishing.
• Author, update, and enforce information security and privacy policies.
• Provide technical support and strategic guidance for cloud and physical infrastructure.

Required profile

• Bachelor’s degree in Systems Engineering or a related field; postgraduate specialization in Information Security preferred.
• Relevant certifications such as ISO 27001 Internal Auditor, ITIL Foundation, and advanced cloud security training.
• 4+ years of experience in dedicated security and compliance roles, preferably in fast‑growth tech environments.
• Professional proficiency in English and native or fluent Spanish.

Required skills

• ISO 27001, SOC 2, GDPR, ISO 27701, ISO 42001 frameworks.
• Penetration testing, secure coding, infrastructure hardening.
• Google Cloud Platform (GCP) and AWS Security/IAM.
• Cloud security best practices and emerging technologies such as Large Language Models.
• OWASP methodologies, DevSecOps, and modern networking security.