← All roles

Security and Compliance Analyst

Peek· Engineering
Apply on company site
RemoteMXN 80k - MXN 90kFull-timePosted 3w ago

About the role

Remote-first security and compliance role owning and operating Peek's security, compliance, and governance programs, including SOC 2, PCI DSS, NF525, GDPR/CCPA, accessibility, and data protection. Partners with Legal, Product, Engineering, IT, and external auditors to drive remediation and enable scalable security.

Responsibilities

  • Own day-to-day operation of our compliance programs, including SOC 2, PCI DSS, NF525, GDPR, and accessibility.
  • Lead audit and certification cycles end to end as the primary point of contact for auditors: scoping, timelines, evidence, requests, findings, and remediation follow-up.
  • Own our compliance platform (Drata), keeping control mappings, evidence, and policies current.
  • Maintain and improve security policies, procedures, controls, and the risk register. Identify control gaps, recommend fixes, and drive remediation to closure with control owners in Engineering, DevOps, IT, Product, HR, and other teams.
  • Run periodic governance activities: access reviews, policy reviews, risk assessments, business continuity plan reviews and test documentation, and vendor security and privacy assessments, bringing in technical experts for higher-risk vendors.
  • Run our data protection program day to day: records of processing, data processing agreements, impact assessments for new features, data subject requests, and data classification and retention standards. Partner with Legal on breach assessment and notification.
  • Lead responses to customer security and privacy questionnaires and RFPs with Sales, and maintain a reusable answer library.
  • Coordinate accessibility compliance with Product, Design, and Engineering, tracking assessments, findings, and the remediation those teams own.
  • Report on program status, risks, and audit readiness to leadership.
  • Use AI and automation to reduce repetitive work such as evidence collection, control mapping, questionnaires, and reporting, including building AI-assisted workflows that help teams find accurate security answers.

Qualifications

  • 3–5 years in security compliance, GRC, IT audit, risk, or a related field
  • Hands-on experience running or supporting at least one SOC 2 Type II or PCI DSS audit cycle end to end
  • Working knowledge of SOC 2 trust services criteria and/or PCI DSS requirements
  • Experience with a GRC or compliance automation platform (Drata or similar)
  • Experience conducting vendor or third-party security risk assessments
  • Experience responding to customer security questionnaires or RFPs
  • A solid understanding of access controls, authentication, vulnerability management, encryption, logging, incident response, change management, and cloud infrastructure, enough to evaluate evidence and challenge control owners when needed
  • Strong organization and follow-through, with the ability to manage multiple work streams independently
  • Clear written and verbal communication with engineers, business teams, auditors, and leadership

Skills

Required:Security & compliance program managementAudit managementGRC / compliance automation (Drata)Vendor risk assessmentsSecurity questionnaires / RFP responsesAccess control & cloud security fundamentals

Benefits

  • Equity considered in compensation
  • Remote-first workplace
  • Competitive base salary in MXN (MX$80K – MX$90K per month) with equity options
Last updated Oct 1, 2026. Interested? Apply on the company site.

About Peek

Discover a new adventure with Peek.

Whether you're a local or planning your next trip, Peek is full of incredible experiences.

TravelExperiencesToursActivitiesBooking
Company profileWebsite

More open roles at Peek