Senior Regional Security Governance & Risk Analyst

Carat Argentina S.A.; Buenos Aires; On-site; ARS 2,400,000 - 4,200,000; Full time

Job summary

Dentsu in Buenos Aires seeks a Senior Regional Security Governance & Risk Analyst to lead governance and risk programs across the Americas. You will coordinate ISMS activities, manage risk assessments, and drive remediation with regional stakeholders to protect information confidentiality, integrity, and availability.

You will support compliance obligations, evidence collection, and security improvement actions, reporting to the Americas Region BISO and working with global teams to ensure

Qualifications

• Experience in information security governance and risk management.
• Ability to translate security requirements into practical business processes.
• Proactive, collaborative communication with stakeholders.
• Supports an information security management system and risk programs.

Responsibilities

• Build relationships with regional/global stakeholders to embed governance.
• Coordinate remediation activities for ISMS findings and audits.
• Assess and report on security controls design and effectiveness.
• Contribute to security training initiatives to raise awareness.
• Coordinate regional risk assessments and maintain risk records.

Skills

Stakeholder management

Information security governance

Risk management

Risk assessments

Compliance management

Security controls

IT auditing

Clear reporting

Education

CISSP

CISM

CISA

CRISC

Job description

Job Description

At dentsu, we are committed to protecting our clients’ brands and data, therefore information security is at the forefront of our business. As a Senior Regional Security Governance & Risk Analyst on the Americas Security team, you’ll play a pivotal role in maintaining a security governance and risk program that supports our information security management system, certification initiatives, policy implementation, and risk and exception management. You’ll collaborate with regional and global stakeholders to coordinate risk assessments, maintain regional inputs to the global security risk register, evaluate control effectiveness, and drive agreed remediation and security improvement actions. You’ll also maintain compliance obligations and supporting evidence, helping translate security requirements into practical business processes that protect information confidentiality, integrity, and availability. Led by the Americas Region BISO, our Americas Region Security team is responsible for security initiatives across the Americas Region and supporting dentsu’s clients and brands.

Responsibilities

• Build positive relationships with regional and global stakeholders, partnering with business, risk, and control owners to embed security governance requirements and progress agreed actions.
• Coordinate risk remediation activities supporting the information security management system, working with action owners to address findings from incidents, root cause analyses, audits, and risk assessments.
• Assess and report on the design and operating effectiveness of security controls, documenting supporting evidence, control gaps, and recommended improvements for risk and control owners.
• Actively contribute to security training initiatives to increase employee awareness
• Coordinate the regional security exception process, documenting business justification, risk assessments, compensating controls, required approvals, and review or expiry dates in line with the defined process.
• Coordinate information security risk assessments using the defined information security risk management process, ensuring relevant stakeholders provide inputs and agreed assessments are completed within established timeframes.
• Assess risks for in-scope platforms across the Americas.
• Maintain regional risk records and their corresponding entries in the global security risk register, keeping risk descriptions, owners, assessments, treatment plans, and status updates accurate and current in coordination with global risk stakeholders.
• Coordinate regional activities supporting security certification initiatives and audits, maintaining assessment schedules, organizing evidence, and tracking findings and agreed corrective actions.
• Maintain the regional security improvement plan, tracking action owners, milestones, and agreed target dates; validate completion evidence and elevate overdue actions or delivery barriers through the appropriate governance channels.
• Partner with business and technology stakeholders to review and improve internal processes and systems, addressing security risks and dependencies identified through business impact assessments and data protection impact assessments to protect information confidentiality, integrity, and availability.
• Define and maintain a regional record of applicable security compliance obligations, mapping each obligation to relevant controls, evidence requirements, and evidence owners to demonstrate alignment.
• Document and regularly review governance, risk assessment, risk treatment, and exception procedures, keeping regional practices aligned with the defined global security governance and risk management processes.
• Drive continuous improvement in regional security governance and risk management by identifying recurring control gaps, analyzing risk trends, and recommending practical, risk-based improvements to regional and global stakeholders.

Candidate Profile

• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Demonstrated experience in information security governance and risk management, including supporting an information security management system and applying knowledge of security practices, technologies, and architectures to business risks.
• Ability to work independently on complex governance and risk activities, prioritize competing demands, and manage assessments and remediation actions through to completion while adapting to changing business conditions.
• Proactive, upbeat and collaborative communication style, with the ability to be direct, tactful, and transparent.
• Ability to work effectively as part of a team.
• Solved problems and risk from multiple perspectives.
• Comfortable with managing uncertainty, ambiguity, and change to make decisions and prioritize tasks.
• Practical experience applying information security risk assessment and treatment techniques, maintaining risk registers, and documenting risk decisions and exceptions using a defined risk management process.
• Ability to translate complex technical findings into clear business-risk statements and concise governance reports for technical and non-technical stakeholders, supported by strong communication and organizational skills.
• Is demonstrably self‑motivated, pro‑active, action orientated to achieve deadlines.
• Proactive development of trending knowledge and skills within information security community.
• Demonstrated ability to support policy reviews, maintain compliance obligations and evidence mappings, and coordinate risk treatment and exception workflows with relevant stakeholders.

Desirable qualifications

• Desirable qualifications include experience with IT assurance and auditing techniques, an understanding of network architecture and protocols, and an achieved or in-progress information security qualification such as CISSP, CISM, CISA, or CRISC. These are advantageous rather than mandatory.
• Experienced with IT assurance functions and auditing techniques (desirable)
• Understanding of network architecture, protocols and principles (desirable)
• Fluency in Spanish and English is required.
• Portuguese proficiency is highly desirable.

Location & Contract

Location: Buenos Aires

Brand: Dentsu

Time Type: Full time

Contract Type: Permanent

About dentsu

About dentsu For over 120 years, innovation has been a core tenet of our offering – exploring new ways to reach, engage and nurture relationships with audiences. Together we drive a multiplier effect for clients at a global scale, through the development of Integrated Growth Solutions that are underpinned by our promise to clients: innovating to impact. Be a force for good. Sustainability is a vital part of our business and an important area of focus for our clients. We’re leading the way – helping to build a more sustainable planet. Dream loud. In this moment of transformation, we need our people to be fearless, embracing change and ambiguity, driven by the love for your work and excitement for the future. Team without limits. We create opportunities for connection and collaboration between our colleagues and clients, building a sense of belonging and having some fun along the way. Find out more about us Who we are Our Social Impact Our work