Consultor de Seguridad de la Información - GRC

Placements24; Monterrey; Hybrid; MXN 1.544.000 - 3.088.000; Vollzeit

Benefits dieser Stelle

Remote work from Mexico

Competitive hourly rate

Flexible schedule

Professional development opportunities

Zusammenfassung

Placements24 is seeking an experienced Information Security Consultant specializing in Governance, Risk, and Compliance (GRC) for a remote contract engagement. This role guides clients through regulatory landscapes and helps establish robust information security frameworks.

You will assess risks, develop compliance strategies, and ensure adherence to ISO 27001, NIST CSF, COBIT, and SOC 2. Strong communication and ability to translate technical requirements into business recommendations are

Qualifikationen

• 6+ years in information security with GRC focus.
• Experience in risk assessments and policy development.
• Familiarity with data privacy laws and regulatory regs.

Aufgaben

• Conduct information security risk assessments and gap analyses.
• Develop and implement GRC programs, policies, and procedures.
• Advise clients on compliance with regulations and standards (GDPR, CCPA, ISO 27001, NIST CSF).
• Assist clients in preparing for and undergoing security audits and certifications.
• Develop security awareness training materials and programs.
• Evaluate and recommend security technologies to support GRC objectives.
• Analyze security incidents from a governance perspective and assist remediation.
• Prepare detailed reports and presentations on security posture and compliance status.
• Stay abreast of evolving cybersecurity threats and regulatory changes.

Kenntnisse

GRC expertise

Risk assessment

Policy development

Regulatory knowledge

Security governance

Analytical skills

Communication skills

Ausbildung

Bachelor's or Master's degree in Information Security / CS / Business

Tools

ISO 27001

NIST CSF

COBIT

SOC 2

Jobbeschreibung

About the Role

Our client, a globally recognized consulting firm, is seeking an experienced Information Security Consultant specializing in Governance, Risk, and Compliance (GRC) for a remote, contract-based engagement. This role is ideal for a seasoned professional who can guide organizations through complex regulatory landscapes and help them establish robust information security frameworks. You will be responsible for assessing security risks, developing compliance strategies, and ensuring adherence to industry standards and regulations. The position requires a deep understanding of GRC principles, frameworks such as ISO 27001, NIST, and PCI DSS, and the ability to translate technical requirements into actionable business recommendations. This is a fully remote position, allowing you to leverage your expertise from anywhere in Mexico.

Key Responsibilities

• Conduct comprehensive information security risk assessments and gap analyses.
• Develop and implement GRC programs, policies, and procedures tailored to client needs.
• Advise clients on compliance with relevant regulations and standards (e.g., GDPR, CCPA, ISO 27001, NIST CSF).
• Assist clients in preparing for and undergoing security audits and certifications.
• Develop security awareness training materials and programs.
• Evaluate and recommend security technologies and tools to support GRC objectives.
• Analyze security incidents and contribute to remediation efforts from a governance perspective.
• Prepare detailed reports and presentations for stakeholders on security posture and compliance status.
• Stay abreast of evolving cybersecurity threats, regulatory changes, and best practices in GRC.
• Collaborate with client teams to integrate security and compliance into business processes.

Requirements

• Bachelor's or Master's degree in Information Security, Computer Science, Business, or a related field.
• Minimum of 6 years of experience in information security, with a strong emphasis on GRC.
• Proven experience in conducting risk assessments and developing security policies.
• In-depth knowledge of major information security frameworks (ISO 27001, NIST, COBIT, SOC 2).
• Familiarity with various regulatory requirements (e.g., data privacy laws, industry‑specific regulations).
• Excellent analytical, problem‑solving, and critical thinking skills.
• Strong report writing and presentation skills.
• Ability to manage multiple projects simultaneously and meet deadlines.
• Excellent interpersonal and communication skills, with the ability to build rapport with clients remotely.
• Relevant certifications such as CISM, CRISC, CISSP are highly preferred.
• Must be authorized to work remotely within Mexico.

Benefits

• This contract role offers a highly competitive hourly rate, reflecting the specialized skills and experience required.
• You will have the flexibility to work remotely from anywhere in Mexico, enjoying a great work-life balance.
• This engagement provides an excellent opportunity to work with a diverse portfolio of clients and gain exposure to various industries.
• Our client offers professional development opportunities and the chance to be part of a globally recognized consulting firm.
• Engage in challenging projects that enhance your expertise in information security governance, risk, and compliance.