Vanta Consultant (Contractor)

Nearshore Cyber | Remote | Part-time, project-based | $50–$100 USD per hour

Nearshore Cyber is a cybersecurity services firm and Vanta partner working with clients in Mexico and the United States. We help companies implement Vanta and run working GRC programs on it: SOC 2, ISO 27001, and the cross-border compliance that comes with operating in both countries.

We are building a bench of independent consultants to deliver Vanta engagements as they arise. This is not a full-time job. Work is periodic and project-based, billed hourly at $50 to $100 USD depending on the engagement, and always remote.

What you'll do

• Implement Vanta for private-sector clients: scope frameworks, connect integrations, configure controls, close gaps
• Use Vanta to build GRC programs that hold up after the auditor leaves — policies, evidence collection, vendor and personnel workflows
• Guide clients through SOC 2, ISO 27001, and similar attestations
• Support ongoing managed-compliance work after go-live

What we require

• Hands-on experience implementing Vanta and using it to develop GRC programs for private-sector organizations. We will ask for specifics.
• Fluency in Spanish and English, spoken and written
• Residence in Mexico or the United States
• Set up to contract independently: 1099 or corp-to-corp in the US; in Mexico, an active RFC with the ability to issue CFDI invoices, personally or through your own company

Preferred locations

Mexico City, Guadalajara, Monterrey, Querétaro, Oaxaca de Juárez, or the Dallas–Fort Worth area. The work is remote regardless; these are where our clients and community cluster.

Helpful, not required

• Certifications such as CISA, CISSP, or ISO 27001 Lead Implementer
• Experience with venture-backed startups and fintechs
• Familiarity with Mexican data-protection law (LFPDPPP)

How it works

Apply and tell us about your Vanta work. We'll talk through your experience and add you to our roster. When an engagement matches your profile, we call.