Note: The job is a remote job and is open to candidates in USA. MFS Talento Humano is seeking a Security Analyst to help a client execute a cybersecurity program aligned with the NIST Cybersecurity Framework 2.0. The role combines hands-on security and compliance work with project management, including cloud and SaaS security controls, third-party risk, audit evidence, stakeholder coordination, and roadmap execution.
Responsibilities
- Draft, review, and maintain security policies, standards, and procedures aligned with NIST CSF 2.0, with particular focus on the Govern function
- Implement, validate, and document security controls across Cloud and SaaS environments, including access management, logging and monitoring, configuration baselines, and data protection
- Maintain CSF Organizational Profiles, control mappings, and supporting evidence
- Collect and organize audit-ready evidence to support compliance requirements and customer assessments
- Conduct vendor and third-party risk assessments and track remediation activities
- Support enterprise customer security questionnaires, RFP responses, and security due diligence
- Own and manage the cybersecurity implementation roadmap, including priorities, owners, timelines, dependencies, and risks
- Coordinate work across IT, Engineering, and Operations and drive accountability across multiple workstreams
- Identify blockers, escalate risks, and recommend appropriate actions
- Provide clear status reporting on program progress, risks, decisions, and expected completion dates
- Maintain risk registers and security exception/acceptance processes
- Establish documented and repeatable processes that can be sustained by the internal team
Skills
- 3–6 years of experience in Information Security, IT Risk, Cybersecurity, or GRC
- Hands-on experience with at least one security framework implementation or audit program, such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, or CIS Controls
- Working knowledge of NIST CSF 2.0 or strong experience with comparable security frameworks
- Hands-on experience securing AWS, Azure, or GCP environments and SaaS platforms
- Experience managing projects or initiatives involving multiple workstreams and distributed stakeholders
- Strong technical writing skills, including policies, procedures, security documentation, and status reporting
- Ability to translate security and compliance requirements into actionable tasks for technical and non-technical stakeholders
- Ability to work independently, take ownership, and deliver results with limited supervision
- Security certifications such as CISSP, CISA, CRISC, CISM, Security+, CCSP, CCSK , or Cloud Security certifications
- PMP, CAPM , or equivalent Project Management training
- Experience with enterprise customer security reviews and vendor due diligence
- Familiarity with GRC/compliance management tools
- Experience with scripting or automation for security evidence collection
- Experience in data-intensive technology environments
Company Overview