About the TeamSalesLoft’s infosec team comprises seasoned and up-and-coming infosec professionals who are all aligned on one vision and mission:
Vision: Every seller is loved by the buyers they serve (#saleslove)Mission: Equip companies to maximize revenue by creating a fantastic buying experience.
The security team consists of security professionals who maintain controls that protect the business in keeping with industry best practices and relevant regulations and frameworks. They are also the epitome of our core values - Customers First. Team Over Self. Focus on Results. Bias Towards Action. Glass Half Full.
About the RoleAs a Senior Security and Compliance Analyst at SalesLoft, you will play a pivotal role in our company's success. Join our high-performing information security team and be the go-to expert for all customer-facing security and compliance matters. 
Your primary focus will be to serve and build trust with Salesloft customers by addressing security, privacy, and compliance concerns as they arise
This is a fully remote opportunity and can be worked from any location in Mexico. Candidates must be based in Mexico and be able to travel to the office in Jalisco as needed.ResponsibilitiesMaintain and evolve policies that hold employees accountable to security and privacy best practices, while remaining practical and aligned with Salesloft’s systems and control environmentConduct third party risk management activities that evaluate the security posture and controls of third party providers, including the implementation and ongoing use of third-party systemsConduct security, privacy and compliance reviews as part of the software development lifecycle for the Salesloft platformWork with business stakeholders to ensure security and privacy requirements are adequately considered as part of the development and delivery methodologyLiaise with third party auditors and internal control owners to ensure the successful completion of attestation and compliance engagementsSupport the automation of cybersecurity risk management programs and reporting capabilities to measure and demonstrate control operational effectivenessWork with various departmental control owners to identify, assess, and treat security and privacy risksRespond to customer security and compliance inquiries, including customer security and privacy questionnaires, compliance attestations, and discussions on product functionality and its impact on customer environmentsMaintenance of the public facing Salesloft trust portalParticipate in meetings with customer security, privacy, legal, and IT teams to address detailed security and compliance questions related to the Salesloft platform and security programCreate and maintain customer-facing materials that streamline the security evaluation process and proactively address common customer concernsEnsure Salesloft’s security awareness training program communicates relevant content that results in meaningful learning across the employee baseSupport the responsible adoption of AI by enabling GRC automation and partnering with business teams on AI-driven initiatives, while establishing and maintaining appropriate AI governance, risk controls, and compliance guardrails Qualifications 5+ years of experience auditing and/or maintaining information security controlsExperience engaging directly with customers as a security subject matter expertWorking knowledge of ISO 27001, SOC 2 Trust Services Principles, GDPR and other common security standardsExperience with "defense-in-depth" principles and technology Strong attention to detail and commitment to qualitySelf-driven, autonomous and can contribute to the strategy and roadmap of the teamAdvanced documentation, prioritization and change management skillsCISA or similar certification #BI-Remote #LI-RemoteWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.