Compliance Support Specialist at Booth and Partners

I’m helping Booth & Partners find a top candidate to join their team full-time for the role of Compliance Support Specialist.

This is a cool job because you'll drive client compliance and cybersecurity success at Eden Data.

Compensation:
COP 7M - 10M/month.
+ Health insurance

Location:
Remote (for Colombia residents).

Mission of Booth & Partners:
"We help businesses achieve their goals by improving productivity and corporate focus through sourcing top-notch talent who can keep pace with the performance of an in-house team for a significantly lower cost."

What makes you a strong candidate:
- You have 2+ years of experience in compliance management, cybersecurity, and project management.
- You are proficient in Asana, Slack and technical support.
- English - Fully fluent.
- Spanish - Fully fluent.

Responsibilities and more:
As a Compliance Support Specialist at Eden Data, you will play a critical role in helping our clients achieve and maintain compliance with SOC 2 Type II, ISO 27001, and other framework standards.

You will maintain clear client communications via Slack and email, oversee clients' Drata instances to ensure all compliance requirements are met, and create and manage project plans in Asana as needed. You will collaborate closely with the internal cybersecurity team to implement security controls, conduct risk assessments, maintain security documentation, and continuously enhance compliance initiatives to protect sensitive information. You will also be answering client questions daily via Slack and email.

Key Responsibilities:
Technical Support:
- Provide technical support for cybersecurity tools and technologies, ensuring operational effectiveness and timely issue resolution.
- Maintain security awareness training documentation for internal and client-facing audiences to promote cybersecurity best practices.
- Support clients' audit readiness by assisting with evidence collection, control testing, and remediation tracking.
- Assist clients with the setup and maintenance of GRC (Governance, Risk, and Compliance) tools, particularly Drata, including data migration, vendor module configuration, user management, and policy updates.

Security Documentation:
- Create, maintain, and update security policies, procedures, and compliance documentation to align with industry standards.
- Develop and maintain trackers for client purposes according to their internal policy requirements.
- Assist clients in completing Self-Assessment Questionnaires (SAQs), leveraging existing onboarding information, historical SAQs, and data housed within GRC platforms.
- Conduct periodic user access reviews across clients' systems and applications.
- Assist in preparing reports and documenting response actions.

Collaboration:
- Partner with cybersecurity team members and cross-functional departments to implement and sustain security measures.
- Research and respond to clients' ad-hoc security inquiries, providing clear and actionable findings.
- Leverage internal tools to optimize workflows and drive efficiency in daily operations.

Exercise Self-Direction:
- Regularly assess and enhance client security postures, leveraging GRC platform features for control management, task assignment, and audit readiness activities.
- Operate autonomously, taking ownership of work and executing tasks ahead of deadlines with minimal oversight.

Requirements:
- Education: Bachelor's degree in Information Security, Computer Science, or a related field.
- Relevant certifications SEC+, CISA, or equivalent may be required. (CISSP, CISM, CRISC are a plus.)
- Experience: Minimum of 2–4 years of experience in cybersecurity, with a focus on compliance management and project management.
- Technical Skills: Proficiency in using Asana (or equivalent) for project management and Slack for effective communication.
- Familiarity with Drata or similar compliance management tools is highly desirable.
- Compliance Knowledge: Strong understanding of SOC 2 Type I and II, and ISO 27001 standards, controls, and assessment methodologies.
- Experience with other compliance frameworks (e.g., HIPAA, GDPR, NIST) is nice to have.
- Analytical Thinking: Ability to analyze and identify security risks, providing practical recommendations for mitigating those risks.
- Communication Skills: Excellent verbal and written communication skills in English, with the ability to convey technical concepts to both technical and non-technical stakeholders effectively.
- Collaboration: Proven ability to work collaboratively in a team environment, interacting with clients, internal teams, and third-party auditors or assessors (as needed).
- This role would not need to take external calls with clients (via Zoom etc.) but does need to be externally facing via Slack and email correspondence.
- Ability to work independently, remotely, with assigned tasks and deadlines, with minimal oversight.
- Attention to Detail: Meticulous and thorough approach to work, ensuring accuracy in documentation, reporting, and compliance activities.
- Adaptability: Ability to thrive in a fast-paced and rapidly changing environment, managing multiple projects simultaneously and meeting deadlines.

Job benefits:
- Competitive salary.
- Prepaid medicine.
- Life insurance.
- Birthday day off.
- Indefinite-term labor contract, with all legal benefits.