Bizagi is at the forefront of the rapidly growing enterprise automation and AI market.
We're hunting for top talent across regions to find innovative people that are eager to make an impact.
Our name stands for Business Agility, and we help organizations adapt to a fast-changing world by embedding AI into operations through business orchestration.
AI is everywhere, but without a solid foundation, it can't deliver ROI.
Bizagi bridges that gap—connecting AI to end-to-end processes and measurable outcomes to ensure real results.
Companies use Bizagi to automate processes, build low-code apps, and integrate systems.
Now, they're adding our AI Agents, Workers, and Assistant in just weeks.
Trusted by leaders like DHL, Unilever, and Old Mutual, Bizagi powers daily operations and transforms how business gets done.What is it like to work at Bizagi?
Founded in LATAM, we're a integral company with strong presence in EMEA and growing in NAM.
We're proud of our diverse culture, world‐class leadership, and incredible team.
At Bizagi, you'll make a real impact, grow professionally, and enjoy the journey.
We value innovation, collaboration, and accountability—and we support flexibility and work‐life balance.
Diversity, inclusion, and mutual respect are part of who we are.
Join us and discover the best work of your career at Bizagi.What We Are SeekingWe are looking for the best talent in the industry to support Bizagi's rapid growth across Latam as a Governance Risk Compliance Specialist.
The role is responsible for implementing corporate security and compliance initiatives while participating in administrating security solutions/tools in support of business objectives.Key Tasks & AccountabilitiesDefine and update data lifecycle policies (acquisition, storage, use, retention, deletion) together with Security & Compliance, Legal, IT, and the Cloud Team, ensuring they are correctly applied across customer and internal environments.Ensure adherence to applicable regulatory frameworks — GDPR, CCPA, Ley ****, HIPAA, EU AI Act (Bizagi's role as Deployer), SARO,



and Circulares de ciberseguridad SFC — supporting timely responses to data subject and regulatory requests.Monitor privacy and security compliance across customer‐facing environments and internal operations, identifying and tracking gaps.Build and apply a solid working understanding of a Cloud Azure‐based architecture to identify where sensitive data resides, how it flows, and where privacy and security controls apply — advisory, not hands‐on implementation.Support Data Protection Impact Assessments (DPIAs) for new and existing systems/processes, working with Legal and system/process owners to identify and mitigate privacy risks.Conduct third‐party/vendor risk assessments and support security/privacy by design reviews on new architecture and AI‐powered agent capabilities, in coordination with the Cloud and Product/Engineering teams.Act as a point of contact for privacy and security questions, translating regulatory obligations into practical guidance for technical and business teams.Develop and deliver compliance and privacy awareness materials and training across the organization.Conduct risk assessments (ISO *****, scenario/root cause analysis) and support internal and external audits (ISO *****, SOC 2), maintaining risk dashboards and escalating emerging risks with proposed mitigations.Academic & professional QualificationsBachelor's degree in information technology, computer science, management information systems, or a related field.Information Security or Risk management Postgraduate degree and/or information security industry certifications: Cloud certifications such as AZ‐900, SC‐900, AWS practitioner is a plus.Industry certifications as CISM, CRISC,



ISO *****:**** auditor, and specific security tools certification.ExperienceAt least 4 years of GRC specific experience working for global cloud and/or AI companies.At least 4 years of experience with security and compliance monitoring frameworks and incident response processes.Exposure to regulatory frameworks (SARO, GDPR, Circulares de SFC, HIPAA, Fedramp).
Technical SkillsInformation Security and Compliance: ISO ***** & GDPR.Information Security Frameworks: NIST, FedRAMP, HIPAA.
(desirable – nice to have)Azure Cloud security and privacy controlsRisk Management ISO *****, SARO, NIST risk management frameworkIncident and data breach Response: Handling security events, regulators reporting, and remediation planning.Project Management: Implementing security initiatives and compliance projects.SkillsAI FluencyAnalytical thinkingattention to detailproblem‐solvingstakeholder managementcommunication and presentation skillsLanguageEnglish level: Advanced English level (At least B2)LocationBogota (ideally)Leader in Intelligent Process AutomationWe empower people to drive digital transformation, helping organizations across industries work more efficiently to the benefit of their employees and customers.
As a global employer, Bizagi believes our success depends on diversity, inclusion and mutual respect among our team members.
We are committed to making all employment decisions based upon business need, individual merit, capability and equality of opportunity.
All qualified applicants will receive consideration for employment without regard to age, disability, sex, gender identity, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships.
We will ensure that any individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process and to perform essential job functions.
Please contact ****** to inform us of any accommodations you may require.
#J-*****-Ljbffr

📌 Governance, Risk & Compliance Specialist (Bogotá)
🏢 Bizagi Group
📍 Bogotá