Governance, Risk & Compliance Specialist

Bizagi is at the forefront of the rapidly growing enterprise automation and AI market. We’re hunting for top talent across regions to find innovative people that are eager to make an impact.

Our name stands for Business Agility, and we help organizations adapt to a fast-changing world by embedding AI into operations through business orchestration. AI is everywhere, but without a solid foundation, it can’t deliver ROI. Bizagi bridges that gap—connecting AI to end-to-end processes and measurable outcomes to ensure real results.

Companies use Bizagi to automate processes, build low-code apps, and integrate systems. Now, they’re adding our AI Agents, Workers, and Assistant in just weeks. Trusted by leaders like DHL, Unilever, and Old Mutual, Bizagi powers daily operations and transforms how business gets done.

What is it like to work at Bizagi?

Founded in LATAM, we’re a global company with strong presence in EMEA and growing in NAM. We’re proud of our diverse culture, world-class leadership, and incredible team.

At Bizagi, you’ll make a real impact, grow professionally, and enjoy the journey. We value innovation, collaboration, and accountability—and we support flexibility and work-life balance. Diversity, inclusion, and mutual respect are part of who we are.

Join us and discover the best work of your career at Bizagi.

What We Are Seeking 

We are looking for the best talent in the industry to support Bizagi’s rapid growth across Latam as a Governance Risk Compliance Specialist. The role is responsible for implementing corporate security and compliance initiatives while participating in administrating security solutions/tools in support of business objectives.

Key Tasks & Accountabilities 

-        Define and update data lifecycle policies (acquisition, storage, use, retention, deletion) together with Security & Compliance, Legal, IT, and the Cloud Team, ensuring they are correctly applied across customer and internal environments.

-        Ensure adherence to applicable regulatory frameworks — GDPR, CCPA, Ley 1581, HIPAA, EU AI Act (Bizagi's role as Deployer), SARO, and Circulares de ciberseguridad SFC — supporting timely responses to data subject and regulatory requests.

-        Monitor privacy and security compliance across customer-facing environments and internal operations, identifying and tracking gaps.

-        Build and apply a solid working understanding of a Cloud Azure-based architecture to identify where sensitive data resides, how it flows, and where privacy and security controls apply — advisory, not hands-on implementation.

-        Support Data Protection Impact Assessments (DPIAs) for new and existing systems/processes, working with Legal and system/process owners to identify and mitigate privacy risks.

-        Conduct third-party/vendor risk assessments and support security/privacy by design reviews on new architecture and AI-powered agent capabilities, in coordination with the Cloud and Product/Engineering teams.

-        Act as a point of contact for privacy and security questions, translating regulatory obligations into practical guidance for technical and business teams.

-        Develop and deliver compliance and privacy awareness materials and training across the organization.

-        Conduct risk assessments (ISO 31000, scenario/root cause analysis) and support internal and external audits (ISO 27001, SOC 2), maintaining risk dashboards and escalating emerging risks with proposed mitigations.

Academic & professional Qualifications 

·       Bachelor’s degree in information technology, computer science, management information systems, or a related field.

·       Information Security or Risk management Postgraduate degree and/or information security industry certifications: Cloud certifications such as AZ-900, SC-900, AWS practitioner is a plus.

·       Industry certifications as CISM, CRISC, ISO 27001:2022 auditor, and specific security tools certification.

Experience

• At least 4 years of GRC specific experience working for global cloud and/or AI companies.

• At least 4 years of experience with security and compliance monitoring frameworks and incident response processes.

• Exposure to regulatory frameworks (SARO, GDPR, Circulares de SFC, HIPAA, Fedramp).

Technical Skills

·       Information Security and Compliance: ISO 27001 & GDPR.

·       Information Security Frameworks: NIST, FedRAMP, HIPAA. (desirable – nice to have)

·       Azure Cloud security and privacy controls

·       Risk Management ISO 31000, SARO, NIST risk management framework

·       Incident and data breach Response: Handling security events, regulators reporting, and remediation planning.

·       Project Management: Implementing security initiatives and compliance projects.

Skills

·       AI Fluency

·       Analytical thinking

·       attention to detail

·       problem-solving

·       stakeholder management

·       communication and presentation skills.

Language

·       English level: Advanced English level (At least B2)

Location

·    Bogota (ideally)