---
title: 'Security and Compliance Analyst at Peek'
canonical: 'https://feeny.ai/job/security-and-compliance-analyst-peek-mexico-8n0wpt9xc8r6'
type: 'job'
last_seen: '2026-09-26'
---

# Security and Compliance Analyst at Peek

- **Company:** Peek
- **Location:** Mexico
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-23
- **Last confirmed live:** 2026-09-26
- **Apply:** https://jobs.ashbyhq.com/peek/7f5d5ae2-3a4c-4294-8489-db6cf040754a

## Job description

Peek is the operating system powering the experiences industry - from museums and attractions to tours and activities. With over $7B in bookings, Peek’s AI-powered platform has helped thousands of merchants to increase revenues, save time, and deliver seamless guest experiences. Customers include MoMA, Whitney Museum, Seattle Aquarium, Bryant Park & Looping Group. The company has raised over $150 million from institutional investors Westcap, Goldman Sachs, and SpringCoast Partners. Learn more at [www.peek.com](http://www.peek.com).

As a remote-first company recognized by Forbes as one of America's Best Startup Employers and by Built In as a 2025 and 2026 Best Place to Work, we are a global team of "Peeksters" who "Obsess Over Our Customers," "Accomplish Big Things," "Collaborate With Purpose," and "Get Better Every Day.

## The Role

We're hiring a Security & Compliance Analyst to run and strengthen our security, compliance, and governance programs across Peek. You'll own day-to-day operation of our compliance programs, including SOC 2, PCI DSS, NF525, and accessibility, and various data protection regulations (GDPR, CCPA, CPRA…). You'll be the primary point of contact for auditors and a trusted partner to Sales on customer security reviews. You'll work closely with our DevSecOps Engineer: they own technical controls and remediation, and you run the program that shows those controls work. You should have run audit cycles before and be comfortable driving work across teams independently. We don't expect deep expertise in every area. NF525 and accessibility, for example, can be learned on the job. You’ll work closely with Engineering, DevOps, IT, Product, Sales, Legal, and external auditors to understand requirements, collect evidence, identify gaps, coordinate remediation, and help make security and compliance easier to operate at scale.

## What you’ll do

- Own day-to-day operation of our compliance programs, including SOC 2, PCI DSS, NF525, GDPR, and accessibility.
- Lead audit and certification cycles end to end as the primary point of contact for auditors: scoping, timelines, evidence, requests, findings, and remediation follow-up.
- Own our compliance platform (Drata), keeping control mappings, evidence, and policies current.
- Maintain and improve security policies, procedures, controls, and the risk register. Identify control gaps, recommend fixes, and drive remediation to closure with control owners in Engineering, DevOps, IT, Product, HR, and other teams.
- Run periodic governance activities: access reviews, policy reviews, risk assessments, business continuity plan reviews and test documentation, and vendor security and privacy assessments, bringing in technical experts for higher-risk vendors.
- Run our data protection program day to day: records of processing, data processing agreements, impact assessments for new features, data subject requests, and data classification and retention standards. Partner with Legal on breach assessment and notification.
- Lead responses to customer security and privacy questionnaires and RFPs with Sales, and maintain a reusable answer library.
- Coordinate accessibility compliance with Product, Design, and Engineering, tracking assessments, findings, and the remediation those teams own.
- Report on program status, risks, and audit readiness to leadership.
- Use AI and automation to reduce repetitive work such as evidence collection, control mapping, questionnaires, and reporting, including building AI-assisted workflows that help teams find accurate security answers.

## What We’re Looking For

Required

- 3–5 years in security compliance, GRC, IT audit, risk, or a related field
- Hands-on experience running or supporting at least one SOC 2 Type II or PCI DSS audit cycle end to end
- Working knowledge of SOC 2 trust services criteria and/or PCI DSS requirements
- Experience with a GRC or compliance automation platform (Drata or similar)
- Experience conducting vendor or third-party security risk assessments
- Experience responding to customer security questionnaires or RFPs
- A solid understanding of access controls, authentication, vulnerability management, encryption, logging, incident response, change management, and cloud infrastructure, enough to evaluate evidence and challenge control owners when needed
- Strong organization and follow-through, with the ability to manage multiple work streams independently
- Clear written and verbal communication with engineers, business teams, auditors, and leadership

Nice to haves

- Experience with Drata
- Accessibility standards such as WCAG
- Familiarity with NF525
- Working with SaaS products, cloud infrastructure, or engineering teams
- Using AI tools or building AI agents and automations for security, compliance, or governance work
- Familiarity with AI governance, particularly the EU AI Act and standards such as ISO/IEC 42001, and a view on how they apply to a company like Peek.
- Certifications such as CISA, CRISC, CIPP/E, or Security+

## What We Value

A few things that will make you successful in this role:

- Ownership. You keep track of the details, follow through, and make sure things don’t quietly fall through the cracks.
- Curiosity. Security and compliance cover a lot of ground. We value people who are comfortable saying “I don’t know yet” and then figuring it out.
- Pragmatism. Compliance shouldn’t exist just to check a box. We want controls and processes that reduce real risk and work for the teams operating them.
- Clear communication. You can translate requirements into understandable actions and communicate effectively with engineers, auditors, customers, and business teams.
- Continuous improvement. If a process is repetitive, confusing, or overly manual, you’ll look for ways to make it better.

Peek Travel Inc. is an equal-opportunity employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, disability, or other legally protected status. If you are unable to apply due to incompatible assistive technology or a disability, please contact us at talent@peek.com.  We will make every effort to respond to your request for disability assistance as soon as possible.

## About Peek

## Company Overview
- **One-liner**: Peek is the operating system and marketplace for the experiences industry, providing booking software and a consumer marketplace for tours, activities, museums, and attractions.
- **Entity Type**: Private (Series D, last raised $70M in May 2026)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2011
- **Founders**: Ruzwana Bashir (CEO) and Oskar Bruening (CTO)

## Core Business
- **Primary industry**: Travel and leisure technology; experiences industry (tours, activities, attractions, museums)
- **Target customers**: B2B (experience operators, museums, theme parks, cultural institutions) and B2C (consumers booking activities)
- **Mission**: To empower operators to deliver extraordinary experiences and make travel planning enjoyable for consumers.

## Products & Services
- **Peek Platform (Software)**: A comprehensive SaaS operating system for experience providers, including reservation management, payments, marketing, reporting, reviews, and AI-powered tools. Powers over $7 billion in bookings.
- **Peek Marketplace**: A consumer-facing marketplace with over 300,000 things to do and 3 million verified reviews, allowing travelers to discover and book activities.
- **Peek Copilot**: An integrated AI platform that includes Dynamic Pricing (delivering 5–20% revenue growth for operators), fraud detection, data analysis, and hundreds of AI agents working behind the scenes.
- **Acquired Products**: ACME Ticketing (ticketing infrastructure, memberships, donations for cultural institutions) and Connect&GO (all-in-one attraction management with RFID technology).

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Key Metric**: Over $7 billion in total bookings processed; total funding raised $193.55M
- **Notable Investors/Partners**: Springcoast Partners (lead in Series D), WestCap, Goldman Sachs Alternatives, Eric Schmidt (Innovation Endeavors), Jack Dorsey, David Bonderman, Paul English (Kayak founder), SV Angel, CAA
- **Growth Signals**: Raised $70M Series D in May 2026; acquired ACME Ticketing and Connect&GO to expand into museums and attractions; named a Challenger by analysts alongside Airbnb, Expedia, and Klook; won Arival’s 2024 Industry Innovation Award; honored with Built In’s 2025 “Best Place to Work” award.

## Competitive Advantages
- **Comprehensive tech stack**: End-to-end platform covering booking, payments, marketing, AI, and on-site operations – unlike fragmented competitors.
- **AI-first approach**: Hundreds of AI agents working 24/7 for dynamic pricing, fraud detection, and operational automation; early mover in AI for the experiences industry.
- **Scale and network**: Over 150 million consumers reached, 300,000 things to do, and thousands of merchants including iconic institutions like MoMA, Whitney Museum, Seattle Aquarium, and Bryant Park.
- **Deep integrations**: Acquisitions of ACME and Connect&GO provide specialized capabilities for ticketing, memberships, and RFID – creating a moat in the museum/attractions segment.

## Strategic Focus
- **AI acceleration**: Doubling down on AI to digitize the experiences industry, with 40% of operators still lacking online booking tools.
- **Market expansion**: Moving beyond tours/activities into museums, theme parks, and cultural attractions through acquisitions and product development.
- **Direct demand enablement**: Helping operators build direct relationships with customers via AI, video platforms, and influencers (TikTok, Instagram).

## Why Work Here
- **Remote-first culture**: Peek is a remote-first company, empowering employees to work from anywhere with a remote work stipend and robust tech stack.
- **Recognized culture**: Named a 2025 “Best Place to Work” by Built In; strong emphasis on collaboration, customer obsession, and continuous improvement.
- **Comprehensive benefits**: Competitive compensation and equity, generous PTO, paid parental leave, 401(k), wellness discounts, mental health subscription, FSA/HSA, and employee assistance programs.
- **Engineering culture**: Engineers leverage cutting-edge languages and tech stacks; monthly no-internal-meeting days; internal mobility opportunities; social committees and ERGs.
- **Growth trajectory**: High-growth company with recent $70M funding and acquisitions, offering employees the chance to work on AI-powered products shaping a $330B industry.

## Sources
1. [peek.com](https://www.peek.com/)
2. [careers.peek.com](https://careers.peek.com/)
3. [cbinsights.com](https://www.cbinsights.com/company/peek-travel)
4. [jobs.ashbyhq.com](https://jobs.ashbyhq.com/peek)

## Other roles at Peek

- [Assistant Controller](https://feeny.ai/job/assistant-controller-peek-remote-6qy8mgwf5q89)
- [Dev Sec Ops Engineer](https://feeny.ai/job/dev-sec-ops-engineer-peek-mexico-7hkpdrw42vcv) — Mexico
- [Senior iOS Engineer](https://feeny.ai/job/senior-ios-engineer-peek-mexico-drxxf06c2z6h) — Mexico
- [Senior Quality Engineer- Automated Testing](https://feeny.ai/job/senior-quality-engineer-automated-testing-peek-mexico-8j3c1t2k0pzb) — Mexico
- [Mid Market Account Executive](https://feeny.ai/job/mid-market-account-executive-peek-remote-w9w3x76paxa7)
- [Product Analyst](https://feeny.ai/job/product-analyst-peek-mexico-city-6t5n098jd62g) — Mexico City, Mexico
- [Organic Growth Manager](https://feeny.ai/job/organic-growth-manager-peek-mexico-city-4jg05phzex83) — Mexico City, Mexico
- [Senior Full Stack Engineer](https://feeny.ai/job/senior-full-stack-engineer-peek-mexico-xrx4wdmyg6d1) — Mexico
- [Enterprise Account Executive](https://feeny.ai/job/enterprise-account-executive-peek-remote-e2ejeap1013h)
- [Sr. Backend Engineer](https://feeny.ai/job/sr-backend-engineer-peek-mexico-city-rq24gmpck3q4) — Mexico City, Mexico