Compliance Analyst at Bishop Fox

Bishop Fox stands as the premier authority in offensive security. We offer a comprehensive suite of solutions, including red teaming, continuous penetration testing, and attack surface management, alongside specialized assessments for cloud, product, and application security. Our impact is significant, as we have partnered with over a quarter of the Fortune 100, half of the Fortune 10, and the majority of the world's leading media and technology firms. With over 16 years of dedication to the security community, we have released dozens of open-source tools and security advisories. We are currently seeking a Senior Compliance Analyst to join our team in a full-time, remote capacity based in Mexico. In this role, you will act as a trusted advisor to our clients, ensuring our security and compliance standards are clearly communicated and maintained.

Key outcomes

• Coordinate cross-functional responses to client security inquiries, due diligence assessments, and Requests for Proposals.
• Represent our security posture accurately to clients, demonstrating our commitment to internal requirements and global standards.
• Collaborate closely with our Sales and Legal teams to ensure all commitments reflect our actual security capabilities.
• Maintain and update a centralized knowledge base of security information by working with subject matter experts.
• Identify and implement process improvements or automation to streamline response workflows and support shorter sales cycles.
• Manage remediation efforts following internal or third-party assessments to ensure sustainable security resolutions.
• Support broader internal compliance and information security initiatives.

Requirements

• At least 2 years of professional experience in IT audit, information security, or IT compliance, supported by a bachelor’s degree.
• A solid understanding of security principles and compliance frameworks, such as ISO 27001, SOC 2, NIST CSF, or SIG.
• The ability to quickly master our internal policies and service offerings, translating technical details into clear communication for clients.
• Exceptional organizational skills and an unwavering attention to detail.
• Strong interpersonal abilities to foster successful cross-functional relationships.
• Comfort working within a fast-paced and evolving professional environment.
• Fluency in English.

Preferred qualifications

• Professional certifications such as CISA, CISSP, CRISC, CISM, CCSK, GIAC, CCNA Security, CSX, or CTPRP.
• Technical familiarity with tools like OneTrust, Salesforce Case Management, or Jira.

Compensation

We offer the flexibility of a remote work environment. Our team members have access to a comprehensive benefits program designed to provide high-quality coverage at an affordable cost.

How to apply

If you are ready to contribute to our mission and help us maintain our culture of excellence, we invite you to submit your application. We look forward to reviewing your qualifications and discussing how your expertise can support our growing team.