{"id":3906245,"url":"https://alion.io/job/retorna-security-compliance-analyst","title":"Security Compliance Analyst","company":{"id":686185,"name":"Retorna","domain":"retorna.app","url":"https://alion.io/company/retorna","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Join","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["BR","CO","ES","CL","PE","VE"],"hiring_countries_total":6,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-06T19:25:38Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T00:15:20Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Sobre Retorna\nEn Retorna trabajamos por la democratización de las finanzas. Somos una fintech especializada en remesas y pagos transfronterizos, con operaciones en Chile, Colombia, Perú, Brasil, Venezuela y España, y un equipo 100% remoto. Estamos en una etapa de crecimiento acelerado y estamos fortaleciendo nuestra función de Ciberseguridad.\nSobre el rol\nReportarás al CISO. Tu misión será construir y mantener las reglas del juego de la seguridad de la información en Retorna, verificar que se cumplan y preparar a la compañía para la certificación ISO 27001. Trabajarás de la mano con Compliance, Legal, Riesgo Tecnológico y Riesgo Operacional para que la seguridad sea gobernada, medible y demostrable.\nTareas\nCrear y mantener la documentación del SGSI (políticas, procedimientos, estándares y líneas base), con control de versiones, revisión y aprobación.\n\nMantener la Declaración de Aplicabilidad (SoA) y la trazabilidad entre los controles del Anexo A de ISO 27001:2022, las políticas internas y la evidencia.\n\nAcompañar el proceso de certificación ISO 27001: gap assessments, plan de cierre de brechas, preparación de evidencia y auditorías de etapa 1 y 2.\n\nCoordinar auditorías internas y atender auditorías externas, revisoría fiscal, reguladores y due diligence de inversionistas, con seguimiento de hallazgos hasta su cierre.\n\nIdentificar y evaluar riesgos de seguridad, mantener la matriz de riesgos y dar seguimiento a los planes de tratamiento.\n\nProbar el diseño y la efectividad de los controles y reportar indicadores del SGSI al Comité de Ciberseguridad.\n\nDiseñar y ejecutar el plan anual de awareness: capacitaciones, inducciones de seguridad y simulaciones de phishing.\n\nApoyar a Compliance y Legal en reportes regulatorios y protección de datos personales.\n\nRequisitos\nTítulo profesional en Ingeniería de Sistemas, Informática o carreras afines.\n\n2 a 4 años de experiencia en GRC, auditoría de TI, seguridad de la información o riesgo tecnológico.\n\nExperiencia práctica con ISO 27001: haber participado en la implementación, mantenimiento o auditoría de un SGSI.\n\nExperiencia redactando políticas y procedimientos de un sistema de gestión.\n\nExperiencia apoyando auditorías y gestionando hallazgos hasta su cierre.\n\nExperiencia en evaluación de riesgos (matriz de riesgos y planes de tratamiento).\n\nInglés técnico de lectura.\n\nEspañol nativo\n\nSuma puntos si tienes:\nCertificación ISO 27001 Lead Implementer, Lead Auditor o Internal Auditor, o certificaciones como CISA, CRISC o CISM.\n\nExperiencia en fintech, banca u otras industrias reguladas (CMF, SFC o similares).\n\nExperiencia en un proceso de certificación ISO 27001 de principio a fin.\n\nConocimiento de protección de datos personales (Ley 21.719, Ley 1581, GDPR) y de herramientas GRC como Vanta.\n\nExperiencia diseñando programas de awareness o campañas de phishing simulado.\n\nBeneficios\nTrabajo 100% remoto desde LATAM.\n\nDías libres ilimitados.\n\nImpacto directo en la construcción de la función de Ciberseguridad de una fintech en crecimiento.\n\n¿Te motiva convertir normas y regulaciones en un sistema de seguridad ordenado, medible y listo para cualquier auditoría? Postula y conversemos.","description_format":"text","description_chars":3168,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Spanish","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Chile","iso":"CL","kind":"country"},{"name":"Peru","iso":"PE","kind":"country"},{"name":"Venezuela","iso":"VE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-11-07T03:21:09Z"}],"visa":[],"liveness":{"score":95,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.946,"p_room":1,"age_days":1,"expected_fill_days":25,"reasons":["conf:1","urgency","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/retorna-security-compliance-analyst","json_url":"https://alion.io/job/retorna-security-compliance-analyst.json","meta":{"generated_at":"2026-11-09T00:39:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1417,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686185},"rest":"https://alion.io/mcp/rest/get_company?id=686185"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fretorna-security-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fretorna-security-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fretorna-security-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/retorna-security-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fretorna-security-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3906245}},{"tool":"search_jobs","arguments":{"company":"retorna.app","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3906245},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}