Coalfire

Cybersecurity advisory and cloud security services

Compliance Framework Content Specialist

Security Governance, Risk & CompliancePosted on Nov 10

Full-timeBuenos Aires, ArgentinaNo salary listed

About the Job

Requirements

Have 3 or more years of experience in compliance, cybersecurity, audit, risk management, governance, or technical content development.
Have demonstrated experience working with one or more compliance frameworks, such as NIST, SOC 1/SOC 2, ISO, PCI, HIPAA, HITRUST, FedRAMP, CMMC, privacy, or AI governance frameworks.
Have experience with GCP.
Be able to interpret authoritative source material and convert it into structured, actionable requirements.
Have experience creating or reviewing control-to-evidence, requirement-to-control, or framework-to-framework mappings.
Demonstrate strong attention to detail and a commitment to content accuracy.
Have excellent written and verbal English communication skills.
Be able to manage multiple framework initiatives and competing priorities.
Be able to work effectively with technical and nontechnical stakeholders.
Demonstrate the ability or willingness to engage directly with customers in a professional, consultative, and customer-focused manner.
Have strong listening, discovery, presentation, and facilitation skills, including the ability to ask clarifying questions and explain complex compliance concepts in clear, audience-appropriate language.
Be able to manage customer expectations, document commitments and open questions, and translate feedback into actionable internal work.

Responsibilities

Research and interpret compliance standards, regulations, frameworks, and industry requirements.
Build and maintain baseline, baseline-modified, and custom compliance frameworks in accordance with established content standards.
Develop and maintain requirements, controls, test procedures, evidence requests, applicability rules, and metadata.
Create and review mappings between framework requirements, evidence requests, cloud controls, partner frameworks, and related content.
Assess framework revisions and determine required updates to existing Compliance Essentials content.
Collaborate with Delivery and subject-matter experts to validate framework structure, control language, evidence requirements, and mappings.
Work directly with customers in discovery sessions, reviews, and feedback discussions to understand their compliance programs, framework usage, and content needs.
Explain framework structure, content scope, evidence expectations, and product behavior to customer audiences without overstating what the product or framework guarantees.
Convert customer questions, feedback, and recurring pain points into documented requirements, content improvements, and product recommendations; follow through with internal teams and communicate outcomes.
Facilitate customer-facing content walkthroughs, enablement sessions, or demonstrations as needed.
Prepare framework content for lower-environment testing, release validation, and production deployment.
Review generated framework files, mapping artifacts, and release packages for completeness, accuracy, consistency, and traceability.
Participate in stage testing, content releases, change-log development, and post-release validation.
Document content decisions, assumptions, dependencies, and known limitations.
Support framework integrations and partner mapping initiatives using structured formats such as JSON, CSV, spreadsheets, or similar data models.
Identify opportunities to improve content processes, automation, tooling, and quality controls.
Contribute to internal training and enablement materials for assessors, Delivery teams, Support, and Customer Success.
Monitor industry developments and emerging frameworks to inform the Content Team roadmap.

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies all across the world navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S., Argentina, and the U.K.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Position Summary

The Compliance Framework Content Specialist supports the Compliance Essentials Content Team by researching, developing, maintaining, and releasing compliance frameworks and related evidence mappings. This role combines compliance expertise, analytical thinking, structured content management, and collaboration with Product, Engineering, Delivery, and Customer Success teams.

The ideal candidate can translate complex regulatory and industry requirements into accurate, usable framework content that supports assessments, evidence collection, reporting, and continuous compliance. They are also comfortable working directly with customers to understand their compliance workflows, explain product content and framework behavior, and turn customer feedback into clear, actionable input for the Content and Product teams.

What You'll Do

Research and interpret compliance standards, regulations, frameworks, and industry requirements.
Build and maintain baseline, baseline-modified, and custom compliance frameworks in accordance with established content standards.
Develop and maintain requirements, controls, test procedures, evidence requests, applicability rules, and metadata.
Create and review mappings between framework requirements, evidence requests, cloud controls, partner frameworks, and related content.
Assess framework revisions and determine required updates to existing Compliance Essentials content.
Collaborate with Delivery and subject-matter experts to validate framework structure, control language, evidence requirements, and mappings.
Work directly with customers in discovery sessions, reviews, and feedback discussions to understand their compliance programs, framework usage, and content needs.
Clearly explain framework structure, content scope, evidence expectations, and product behavior to customer audiences without overstating what the product or framework guarantees.
Convert customer questions, feedback, and recurring pain points into documented requirements, content improvements, and product recommendations; follow through with internal teams and communicate outcomes.
Facilitate customer-facing content walkthroughs, enablement sessions, or demonstrations as needed.
Prepare framework content for lower-environment testing, release validation, and production deployment.
Review generated framework files, mapping artifacts, and release packages for completeness, accuracy, consistency, and traceability.
Participate in stage testing, content releases, change-log development, and post-release validation.
Document content decisions, assumptions, dependencies, and known limitations.
Support framework integrations and partner mapping initiatives using structured formats such as JSON, CSV, spreadsheets, or similar data models.
Identify opportunities to improve content processes, automation, tooling, and quality controls.
Contribute to internal training and enablement materials for assessors, Delivery teams, Support, and Customer Success.
Monitor industry developments and emerging frameworks to inform the Content Team roadmap.

What You'll Bring

3+ years of experience in compliance, cybersecurity, audit, risk management, governance, or technical content development.
Demonstrated experience working with one or more compliance frameworks, such as NIST, SOC 1/SOC 2, ISO, PCI, HIPAA, HITRUST, FedRAMP, CMMC, privacy, or AI governance frameworks.
Experience with GCP.
Strong ability to interpret authoritative source material and convert it into structured, actionable requirements.
Experience creating or reviewing control-to-evidence, requirement-to-control, or framework-to-framework mappings.
Strong attention to detail and commitment to content accuracy.
Excellent written and verbal English communication skills.
Ability to manage multiple framework initiatives and competing priorities.
Ability to work effectively with technical and nontechnical stakeholders.
Demonstrated ability or willingness to engage directly with customers in a professional, consultative, and customer-focused manner.
Strong listening, discovery, presentation, and facilitation skills; able to ask clarifying questions and explain complex compliance concepts in clear, audience-appropriate language.
Skill in managing customer expectations, documenting commitments and open questions, and translating feedback into actionable internal work.

Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].

About the Company

Coalfire

Cybersecurity advisory and cloud security services

Coalfire provides cybersecurity advisory and managed services to protect digital assets and secure cloud environments. Its offerings include risk assessments, threat and vulnerability management, compliance and third-party risk services, and cloud security consulting and managed services. It differentiates itself with a focus on regulated industries, HIPAA and HITRUST expertise, and end-to-end advisory plus security operations for compliant cloud deployments. Its goal is to reduce cyber risk and help clients build secure, compliant cloud infrastructures, while supporting cybersecurity education through the Richard E. Dakin Fund.

Company size: 1,001-5,000
Company stage: Series B
Total funding: $9.4M
Headquarters: Westminster, CO
Founded: 2001

Recently Posted Jobs

Explore more opportunities at Coalfire

See more jobs