Senior Regional Security Governance & Risk Analyst

Dentsu International Americas; Buenos Aires; On-site; ARS 1,200,000 - 1,800,000; Full time

Job summary

Dentsu International Americas is seeking a Senior Regional Security Governance & Risk Analyst to lead and coordinate governance, risk assessment, and remediation activities across the Americas region. The role supports information security management systems, policy implementation, and certification initiatives.

You will collaborate with regional and global stakeholders to ensure controls are effective, evidence is maintained, and security requirements are translated into practical business

Qualifications

• Demonstrated experience in information security governance and risk management.
• Experience supporting an information security management system and policy implementation.
• Ability to coordinate risk assessments with multiple stakeholders.

Responsibilities

• Build positive relationships with regional and global stakeholders, embedding security governance requirements and progress agreed actions.
• Coordinate risk remediation activities supporting the information security management system, addressing findings from incidents, audits, and risk assessments.
• Assess and report on the design and operating effectiveness of security controls, documenting evidence, gaps, and improvements.
• Actively contribute to security training initiatives to increase employee awareness.
• Coordinate the regional security exception process with business justification, risk assessments, and approvals.
• Coordinate information security risk assessments ensuring inputs and assessments are completed within timeframes.
• Assess risks for in-scope platforms across the Americas.
• Maintain regional risk records and updates in the global security risk register.
• Coordinate regional activities supporting security certification initiatives and audits.
• Maintain the regional security improvement plan with milestones and target dates; validate completion evidence.
• Partner with business and technology stakeholders to improve internal processes and protect information confidentiality, integrity, and availability.
• Define and maintain a regional record of applicable security compliance obligations.
• Document and regularly review governance, risk assessment, treatment, and exception procedures.
• Drive continuous improvement in regional security governance and risk management.

Job description

Job Description

At dentsu, we are committed to protecting our clients' brands and data, therefore information security is at the forefront of our business.

As a Senior Regional Security Governance & Risk Analyst on the Americas Security team, you'll play a pivotal role in maintaining a security governance and risk program that supports our information security management system, certification initiatives, policy implementation, and risk and exception management. You'll collaborate with regional and global stakeholders to coordinate risk assessments, maintain regional inputs to the global security risk register, evaluate control effectiveness, and drive agreed remediation and security improvement actions. You'll also maintain compliance obligations and supporting evidence, helping translate security requirements into practical business processes that protect information confidentiality, integrity, and availability. Led by the Americas Region BISO, our Americas Region Security team is responsible for security initiatives across the Americas Region and supporting dentsu's clients and brands.

Responsibilities

• Build positive relationships with regional and global stakeholders, partnering with business, risk, and control owners to embed security governance requirements and progress agreed actions.
• Coordinate risk remediation activities supporting the information security management system, working with action owners to address findings from incidents, root cause analyses, audits, and risk assessments.
• Assess and report on the design and operating effectiveness of security controls, documenting supporting evidence, control gaps, and recommended improvements for risk and control owners.
• Actively contribute to security training initiatives to increase employee awareness
• Coordinate the regional security exception process, documenting business justification, risk assessments, compensating controls, required approvals, and review or expiry dates in line with the defined process.
• Coordinate information security risk assessments using the defined information security risk management process, ensuring relevant stakeholders provide inputs and agreed assessments are completed within established timeframes.
• Assess risks for in-scope platforms across the Americas.
• Maintain regional risk records and their corresponding entries in the global security risk register, keeping risk descriptions, owners, assessments, treatment plans, and status updates accurate and current in coordination with global risk stakeholders.
• Coordinate regional activities supporting security certification initiatives and audits, maintaining assessment schedules, organizing evidence, and tracking findings and agreed corrective actions.
• Maintain the regional security improvement plan, tracking action owners, milestones, and agreed target dates; validate completion evidence and elevate overdue actions or delivery barriers through the appropriate governance channels.
• Partner with business and technology stakeholders to review and improve internal processes and systems, addressing security risks and dependencies identified through business impact assessments and data protection impact assessments to protect information confidentiality, integrity, and availability.
• Define and maintain a regional record of applicable security compliance obligations, mapping each obligation to relevant controls, evidence requirements, and evidence owners to demonstrate alignment.
• Document and regularly review governance, risk assessment, risk treatment, and exception procedures, keeping regional practices aligned with the defined global security governance and risk management processes.
• Drive continuous improvement in regional security governance and risk management by identifying recurring control gaps, analyzing risk trends, and recommending practical, risk-based improvements to regional and global stakeholders.

Candidate Profile

• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Demonstrated experience in information security governance and risk management, including supporting an information security management system and applying knowledge of security practices, technologies, and architectures to business risks.
• Ability to work independently on complex governance and risk activities, prioritize competing demands, and manage assessments and remediation actions through to completion while adapting to changing business conditions.
• Proactive, upbeat and collaborative communication style, with the ability to be direct, tactful, and transparent
• Ability to work effectively as part of a team
• Solid problem-solving skills. Ability to analyze problems and risk from multiple perspectives
• Comfortable with managing uncertainty, ambigui