{"id":4265370,"url":"https://alion.io/job/masabi-security-compliance-analyst-2","title":"Security Compliance Analyst","company":{"id":172322,"name":"Masabi","domain":"masabi.com","url":"https://alion.io/company/masabi","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":115,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["RO"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"Confluence","optional":true},{"name":"Jira","optional":true},{"name":"n8n","optional":true}],"status":"live","first_seen_at":"2026-11-13T15:36:22Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T12:48:21Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us_\n// At Masabi, we’re driving the fare payment revolution, powering the journeys of millions all over the world. We build fare collection platforms that allow riders to seamlessly buy and present tickets for public transport either on their mobile phones, from a ticket machine, or even by tapping their bank card to travel.\nOur Justride platform is used in over 250 locations globally, including some of the largest cities in the world. With our industry-first mobile ticketing SDK, we’ve partnered with large players in the transport space, including Uber, Moovit and Transit.\nYour own journey is important to us too. Choosing a role here means joining a network of innovators from all walks of life; a group of passionate individuals who consistently deliver. Here, you’ll find the tools you need to build the career you want. Whether you’re taking the direct route or trying a new path, we’ll support you no matter what.\nThe Role_\n // You will join the Security team at Masabi. Masabi builds Justride, a mobile ticketing and fare collection platform used by public transport authorities and agencies around the world. Our customers trust us with their riders' data and payments, so security and compliance are central to our business.\nAs a Security Compliance Analyst, you will help us run our security controls consistently and on time. You will own selected control processes from start to finish, carry out reviews, manage third-party risk and support our commercial teams when customers and prospects ask about our security. This role is a good fit for someone who is careful, organised and enjoys finding ways to make repeatable work simpler and more reliable.\nYou will work with a degree of autonomy, be the go-to person for day-to-day compliance questions, and help set the standard for how evidence, registers and documentation are maintained. You will also support us to make compliance work faster, more consistent and easier to scale through automation and AI. This role is a good fit for someone who is rigorous and pragmatic, and who enjoys turning frameworks and requirements into simple, repeatable processes that people actually follow.\nLocation_\n // This role is only available to candidates based in Romania in a fully remote model.\nResponsibilities_\nOwn a portfolio of assigned security control processes end to end: plan them, carry them out, gather evidence, and follow up on and track any findings until they're resolved with clear ownership.\n\nPerform manual and tool-based security controls, helping us close gaps where controls are missing or not run consistently.\n\nCarry out regular reviews, such as user access reviews, and make sure results and actions are recorded.\n\nRun our Third-Party Risk Management (TPRM) process: assessing new and existing suppliers, reviewing their security posture, tracking risks, and scheduling reassessments.\n\nMaintain the risk registers that keep our security and privacy processes on track (for example supplier, risk, asset, and data processing registers), keeping them accurate and current.\n\nHelp analyse security and privacy requirements in bids and tenders from transport agencies, and work with the wider team to prepare clear, accurate answers.\n\nRespond to security questionnaires and information requests from existing customers.\n\nSupport audits and certifications (such as ISO 27001, ISO 27017:18, AICPA SOC 2, PCI DSS, NIST CSF and Cyber Essentials) by preparing evidence and documentation.\n\nLook for opportunities to automate or improve control processes, including with AI tools, so they are faster, more consistent and easier to scale.\n\nAbout You_\nHands-on experience in information security, IT compliance, internal control or audit, where you’ve owned control processes from start to finish rather than only supporting them\n\nPractical experience with audits or assessments against at least two recognised frameworks from ISO 27001, SOC 2, PCI DSS, GDPR or NIST, including mapping controls across them\n\nSolid understanding of access control, risk management, third-party risk and data protection, and of how cloud services and SaaS tools fit together from a security point of view\n\nDetail-oriented and consistent: you follow a process carefully and don’t let things slip through the cracks\n\nClear writing and a knack for structuring information well, whether that’s documentation, registers, or questionnaire answers\n\nOrganised enough to juggle several recurring tasks and deadlines at once\n\nComfortable taking ownership of your work, and not afraid to ask questions when something isn’t clear\n\nWe don't expect you to tick every box. What matters most is curiosity, a willingness to learn, and the motivation to take ownership of your work.\nNice to Have_\nExperience with Third-Party Risk Management or vendor security assessments.\n\nExperience supporting RFPs, tenders or customer security questionnaires.\n\nHands-on experience with compliance automation or GRC platforms (for control monitoring, evidence collection and audit management).\n\nInterest in automation, such as scripting, low-code tools (e.g. n8n, Make) or using AI to improve workflows.\n\nExperience with Vanta, AWS, Jira or Confluence.\n\nA relevant certification such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC, CISSP or Security+.\n\nExperience in SaaS, payments or public transport and public sector environments.\n\nAI at Masabi_\n // AI is becoming part of how we work at Masabi. You don’t need professional experience using AI tools, but we’d expect you’ve experimented with them and are curious about how they can help you learn, solve problems, and work more effectively.\nSome Of Our Benefits_\n25 days holiday per year plus the Christmas Shutdown (another 3 days)\n\nPremium medical care via Regina Maria\n\nMental health support\n\nMenopause support\n\nRegular social gatherings with a monthly allowance for each employee\n\nUp to €1000 training budget per year\n\n€200 to spend on your home office\n\nChoice of workstation\n\nCareers at Masabi are for people going places - driven by a mission to make transit fair and accessible for all.\n// We are a network of innovators from all walks of life, passionate about making a difference. At Masabi, we operate with openness and trust, creating an environment where everyone feels empowered to bring their whole, authentic selves to work.\nWhoever you are, just be yourself.\n// We welcome applications from underrepresented groups, including disabled and neurodivergent people, and can make adjustments at any stage of the process. You’re also welcome to share your pronouns whenever you feel comfortable. Together, we simplify journeys, remove barriers, and improve daily life for millions.\nWhy Join Masabi?\nDriven by Purpose - We believe in journeys made simple. The work isn’t always easy, but the best things never are.\n\nEncouraged to Accelerate - Masabi is going places and our people are in the driving seat. Whether you’re taking the direct route or exploring new paths, we support your journey.\n\nAdvancing with Empathy - We put people first and foster a culture of learning, not blame. No matter your cargo, we share the load.\n\nWe’re already powering journeys - are you ready to join us?","description_format":"text","description_chars":7193,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Home office"],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Transportation & Logistics","Ticketing"],"lifecycle":[{"event":"open","at":"2026-11-13T16:32:51Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":115,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/masabi-security-compliance-analyst-2","json_url":"https://alion.io/job/masabi-security-compliance-analyst-2.json","meta":{"generated_at":"2026-11-14T14:21:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15155,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172322},"rest":"https://alion.io/mcp/rest/get_company?id=172322"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmasabi-security-compliance-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmasabi-security-compliance-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmasabi-security-compliance-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/masabi-security-compliance-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmasabi-security-compliance-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4265370}},{"tool":"search_jobs","arguments":{"company":"masabi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4265370},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}