# Security Compliance Analyst

> Sur · Mexico (Remote) · — · Posted 2026-08-26

**Workplace:** remote

## Description

As the Security Compliance Analyst, you will manage security, compliance, and customer assurance programs. You will work directly with the VP of Information Security & Compliance on customer security questionnaires, SOC 2 and other audits, control testing, evidence collection, vendor assessments, and compliance initiatives including CMMC and NIST 800-171. This is a hands-on, technically self-sufficient role, not a policy-only or checklist-driven GRC position.  

### **Responsibilities**

-   Complete customer security questionnaires, DDQs, RFP security sections, and related security reviews.
-   Research technical questions and produce accurate, defensible answers based on the company's actual environment and controls.
-   Maintain a reusable library of approved questionnaire responses and supporting evidence.
-   Recognize when an existing answer applies, when something has changed, and when a subject-matter expert genuinely needs to be involved.
-   Participate in customer security calls when deeper technical or compliance discussions are required.
-   Help make the customer assurance process faster without sacrificing accuracy.
-   Track findings, exceptions, remediation activities, and control-owner commitments through completion.
-   Manage deadlines, maintain and report status, and escalate as needed.

## Requirements

-   3+ years of relevant experience across IT, security, GRC, compliance, cloud operations, systems administration, or a similar field.
-   Solid understanding of common security concepts.
-   Hands-on experience with security compliance work, audit evidence, security questionnaires, or control testing.
-   Excellent spoken English, with the ability to participate confidently in meetings with U.S.-based customers, auditors, and internal teams.
-   Strong organizational skills and attention to detail, with the ability to manage multiple questionnaires, audit requests, and deadlines simultaneously.
-   Hands-on experience administering Windows and cloud-based architectures, including IT Tier 2 or systems administration work.
-   Comfortable investigating technical systems directly (for example, AWS, identity platforms, endpoint-management tools, GitHub, ticketing systems) to retrieve evidence rather than relying on Engineering or IT for every request.
-   Working knowledge of scripting or automation (for example, PowerShell) to operate efficiently at scale.
-   Ability to write clear, accurate technical documentation.

## Benefits

-   Compensation: $2000 to $3000
-   Schedule: U.S. business hours
-   PTO: Choice of following the U.S. holiday calendar or your home country's calendar.
-   Health & Equipment: Healthcare reimbursement eligibility after 90 days; a device stipend of up to $1,500, or reimbursement if you use your own equipment.

## Apply

[Apply at Sur](https://apply.workable.com/surglobal/j/C06B0AE0D0/apply)

---
Powered by [Workable](https://www.workable.com)