Security and Compliance Analyst

PeekMexicoEngineering

Apply on company site

Opens the official Peek careers page

Salary

Not listed

Job type

Full-time

Work mode

Remote

Posted

23 Sept 2026

Status

Open · checked 7d ago

About this role

The Security and Compliance Analyst role at Peek is a remote position based in Mexico, designed for a professional with three to five years of experience in security compliance, GRC, or IT audit. This role suits an organized individual ready to independently drive compliance programs, manage audit cycles, and partner with internal teams and external auditors.

Role Overview

Peek is hiring a Security and Compliance Analyst to run and strengthen security, compliance, and governance programs across the organization. This position owns the day-to-day operation of compliance frameworks such as SOC 2, PCI DSS, NF525, GDPR, CCPA, CPRA, and accessibility regulations. Serving as the primary point of contact for auditors and a partner to the Sales team on security reviews, the analyst works closely with the DevSecOps Engineer and other cross-functional departments to ensure controls operate effectively at scale.

Key Responsibilities

Own day-to-day operation of compliance programs including SOC 2, PCI DSS, NF525, GDPR, and accessibility.

Lead audit and certification cycles end to end, acting as the primary point of contact for auditors regarding scoping, evidence, requests, findings, and remediation.

Manage the compliance platform, keeping control mappings, evidence, and policies current.

Maintain and improve security policies, procedures, controls, and the risk register while driving remediation with control owners.

Run periodic governance activities such as access reviews, policy reviews, risk assessments, business continuity plan tests, and vendor security assessments.

Handle day-to-day data protection tasks including records of processing, data processing agreements, impact assessments, data subject requests, and classification standards.

Lead responses to customer security questionnaires and RFPs in partnership with Sales.

Coordinate accessibility compliance with Product, Design, and Engineering teams.

Report program status, risks, and audit readiness to leadership.

Utilize AI and automation to reduce repetitive tasks like evidence collection, control mapping, and questionnaire responses.

Requirements

3 to 5 years of professional experience in security compliance, GRC, IT audit, risk, or a related field.

Hands-on experience running or supporting at least one SOC 2 Type II or PCI DSS audit cycle end to end.

Working knowledge of SOC 2 trust services criteria and/or PCI DSS requirements.

Experience utilizing a GRC or compliance automation platform.

Experience conducting vendor or third-party security risk assessments and responding to customer security questionnaires or RFPs.

Solid understanding of access controls, authentication, vulnerability management, encryption, logging, incident response, change management, and cloud infrastructure.

Strong organizational skills, follow-through, and the ability to manage multiple work streams independently.

Clear written and verbal communication skills tailored for engineers, business teams, auditors, and leadership.

Nice to Have

Experience with Drata.

Familiarity with accessibility standards such as WCAG and NF525.

Background working with SaaS products, cloud infrastructure, or engineering teams.

Experience using AI tools or building AI agents and automations for security, compliance, or governance work.

Familiarity with AI governance, including the EU AI Act and ISO/IEC 42001.

Professional certifications such as CISA, CRISC, CIPP/E, or Security+.

Skills and Tools

SOC 2 and PCI DSS frameworks

GRC and compliance automation platforms (such as Drata)

Data protection regulations (GDPR, CCPA, CPRA)

Vendor security risk assessments

AI tools and automations for compliance workflows

Access controls and cloud infrastructure evaluation

Salary and Benefits

Salary: 80,000 to 90,000 MXN per year

About the Company

Peek is the operating system powering the experiences industry, connecting museums, attractions, tours, and activities with an AI-powered platform. Recognized by Forbes as one of America's Best Startup Employers and by Built In as a Best Place to Work, Peek is a remote-first global team committed to customer obsession, collaboration, and continuous improvement. The company has raised over $150 million from prominent investors including Westcap, Goldman Sachs, and SpringCoast Partners.

How to Apply

Candidates should apply directly on the official company careers page at peek.com.

Questions candidates ask

What is the geographic location for this role?

This is a remote position based in Mexico.

How many years of experience are required?

Candidates need 3 to 5 years of experience in security compliance, GRC, IT audit, risk, or a related field.

What compliance frameworks will I manage?

You will manage frameworks and regulations including SOC 2, PCI DSS, NF525, GDPR, CCPA, CPRA, and accessibility standards.

Is experience with AI tools required?

AI tool experience is listed as a nice-to-have qualification rather than a mandatory requirement.

How should I submit my application?

You should apply directly on the official company careers page at peek.com.

Ready to apply?

The application is on the official Peek careers page.

Apply on company site