[Remote] Security Analyst

Note: The job is a remote job and is open to candidates in USA. MFS Talento Humano is seeking a Security Analyst to help a client execute a cybersecurity program aligned with the NIST Cybersecurity Framework 2.0. The role combines hands-on security and compliance work with project management, including cloud and SaaS security controls, third-party risk, audit evidence, stakeholder coordination, and roadmap execution.

Responsibilities

• Draft, review, and maintain security policies, standards, and procedures aligned with NIST CSF 2.0, with particular focus on the Govern function
• Implement, validate, and document security controls across Cloud and SaaS environments, including access management, logging and monitoring, configuration baselines, and data protection
• Maintain CSF Organizational Profiles, control mappings, and supporting evidence
• Collect and organize audit-ready evidence to support compliance requirements and customer assessments
• Conduct vendor and third-party risk assessments and track remediation activities
• Support enterprise customer security questionnaires, RFP responses, and security due diligence
• Own and manage the cybersecurity implementation roadmap, including priorities, owners, timelines, dependencies, and risks
• Coordinate work across IT, Engineering, and Operations and drive accountability across multiple workstreams
• Identify blockers, escalate risks, and recommend appropriate actions
• Provide clear status reporting on program progress, risks, decisions, and expected completion dates
• Maintain risk registers and security exception/acceptance processes
• Establish documented and repeatable processes that can be sustained by the internal team

Skills

• 3–6 years of experience in Information Security, IT Risk, Cybersecurity, or GRC
• Hands-on experience with at least one security framework implementation or audit program, such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, or CIS Controls
• Working knowledge of NIST CSF 2.0 or strong experience with comparable security frameworks
• Hands-on experience securing AWS, Azure, or GCP environments and SaaS platforms
• Experience managing projects or initiatives involving multiple workstreams and distributed stakeholders
• Strong technical writing skills, including policies, procedures, security documentation, and status reporting
• Ability to translate security and compliance requirements into actionable tasks for technical and non-technical stakeholders
• Ability to work independently, take ownership, and deliver results with limited supervision
• Security certifications such as CISSP, CISA, CRISC, CISM, Security+, CCSP, CCSK , or Cloud Security certifications
• PMP, CAPM , or equivalent Project Management training
• Experience with enterprise customer security reviews and vendor due diligence
• Familiarity with GRC/compliance management tools
• Experience with scripting or automation for security evidence collection
• Experience in data-intensive technology environments

Company Overview