Information Security Compliance Analyst

The role

This position is intended to be involved in the implementation and improvement of administrative and technical controls of the company's Information Security Management System. This person should understand the risk assessment process to detect new threats, contribute in the action plan development and promote the progress of control implementation and evolution. The position will cover compliance activities, third parties risk assessments, management of clients requirements, internal awareness and technical controls evaluation.

Key responsibilities

• Support the implementation and maintenance of the global ISMS (based on ISO27001) over the LATAM region.
• Evaluate the compliance status of processes and technology implementations and plan actions to align to the security framework. 
• Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company's operations.
• Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organization security and legal compliance.
• Act as a point of contact for third parties questions regarding information security (like the finance team)
• Analyze clients requirements regarding information security and evaluate their accuracy. Follow up the actions needed to comply with those requirements.
• Identify security threats and risks over processes, conducts, technology and context which may affect the information confidentiality, integrity or availability.. 
• Assist in the definition and construction of security measures to lower the risks identified.
• Solve low complex issues independently with minimum supervision and escalate more complex issues to accurate staff.
• Contribute in the development of awareness material and the process of delivery and measurement.
• Perform routine activities to ensure compliance with security frameworks and legislation.
• Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end-point protection, network security, security and vulnerabilities assessment).

Minimum Qualifications

• Bachelor's degree/advanced education in Computer Science, Computer or Systems Engineering or equivalent
• Minimum of 5 years of experience in the IT industry.
• Minimum of 3 years of experience in InfoSec related positions.
• Solid knowledge of security on networking, cloud, infrastructure configuration, end-point protection and SDLC.
• Knowledge of the standard ISO 27001/2.
• Upper Intermediate english. This will be tested during the interview process

Preferred Qualifications

• +1 year of dedicated experience in any of the following areas:
• Security Risk Management
• Security Consultant
• Security/IT ISO implementer
• Information Security Certification (e.g. CompTIA Sec+, ISC2 CC, AWS Practitioner/Security Specialist, etc)

What we are looking for

• Excellent communication and social skills.
• Ability to confidently present findings to those with either a technical or non-technical background.
• Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.
• Ability to self-organize and plan activities with commitment towards results.
• Ready to learn new contents both from others or self-learned.
• Passionate about self-improvement and suggesting improvements to processes or activities.

About Media.Monks:

Media.Monks is the global, purely digital, unitary operating brand of S4Capital plc. Since 2021, Media.Monks has combined diverse solutions—media, data, social, platforms, studio, experience, brand and technology services—to serve as a consultative partner integrating systems and workflows that deliver unfettered content production, scaled experiences and data science fueled by AI and the industry’s very best talent and teams.

Media.Monks was named a Contender in The Forrester Wave™: Global Marketing Services. It has earned a constant presence on Adweek’s Fastest Growing lists (2019-23), ranks among Cannes Lions' Top 10 Creative Companies (2022-23), and earns continual inclusion in AdExchanger’s Programmatic Power Players (2020-23). It has also been named Adweek’s first AI Agency of the Year (2023). Business Intelligence has recognized Media.Monks in its 2024 Excellence in Artificial Intelligence Awards program in three categories: the Individual category, Organizational Winner in AI Strategic Planning, and AI Product for its service Monks.Flow. Media.Monks has earned the title of Webby Production Company of the Year (2021-23), won a record number of FWAs, and a spot on Newsweek’s Top 100 Global Most Loved Workplaces 2023.

• Responsible for resourcing and implementing security controls for your teams processes and systems
• Responsible that all your personnel apply information security in accordance with the established information security policy