Cyber Advisory Associate Manager

The British American Tobacco Group; Monterrey; Presencial; MXN 1.205.857 - 1.550.387; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Market leading annual performance bonus

Diverse health plans

Flexible holiday plan

Descripción de la vacante

The British American Tobacco Group, based in Monterrey, is seeking a Cyber Advisory Associate Manager to oversee cyber and IT risks. This role includes identifying and managing risks, ensuring compliance, and providing cybersecurity guidance.

Candidates should have over 10 years of experience in Cyber Security and a relevant degree. The position offers competitive benefits including performance bonuses and various health plans.

Formación

• 10+ years of professional experience in Cyber Security, Information Security, or Cyber Risk Management.
• Proven experience performing cyber risk assessments.
• Strong understanding of cybersecurity governance and regulatory requirements.

Responsabilidades

• Identify, assess, and manage cyber and IT risks.
• Conduct cyber risk assessments for technologies and processes.
• Monitor emerging cyber threats and oversee mitigation activities.
• Provide guidance on cybersecurity best practices.
• Ensure compliance with cybersecurity regulations.

Conocimientos

Cyber Security

Risk Management

Communication Skills

Cybersecurity Governance

Educación

Bachelor’s degree in Computer Science, Engineering, Business or related field

Herramientas

Azure

AWS

Descripción del empleo

BAT is evolving at pace into a global multi-category business on a mission to decrease the health impact of our industry.

To achieve our ambition, we are looking for colleagues who are ready to Be The Change. Come, join us on this journey!

British American Tobacco Mexico has an exciting opportunity for a Cyber Advisory Associate Manager in Monterrey.

The Cyber Advisory Associate Manager ensures that cyber and IT risks are effectively identified, assessed, mitigated, and monitored, while maintaining alignment with internal standards and regulatory requirements. The position involves close collaboration with IDT, Regions, cyber teams, and external stakeholders to embed a culture of proactive risk management and cybersecurity awareness.

Your key responsibilities will include:

• Identify, assess, and manage cyber and IT risks, ensuring they are accurately recorded in risk management tools and aligned with enterprise risk frameworks.
• Conduct cyber risk assessments for new and existing technologies, projects, vendors, and business processes, supporting the implementation of appropriate controls.
• Monitor emerging cyber threats and oversee mitigation activities to reduce risk exposure across the business.
• Provide expert advisory guidance on cybersecurity best practices, ensuring security controls are embedded across both technical and non-technical areas.
• Ensure compliance with internal policies, industry standards, and regulatory requirements related to cybersecurity and risk management.
• Prepare and maintain cyber risk reporting, including risk status, key risk indicators (KRIs), and remediation tracking, supporting governance and risk forums.
• Support internal and external audits, including audit readiness activities and remediation follow-up.
• Collaborate with business, IDT, Legal, Compliance, Audit, and central Cyber teams to ensure consistent implementation of cyber governance, tools, and processes.

What are we looking for?

• Bachelor’s degree in Computer Science, Engineering, Business, or a related field.
• 10+ years of professional experience in Cyber Security, Information Security, or Cyber Risk Management with increasing scope and responsibility.
• Proven experience performing cyber risk assessments for technologies, projects, vendors, and business processes.
• Strong understanding of cybersecurity governance, risk management, audits, and regulatory requirements.
• Ability to translate complex technical cyber risks into clear, business-oriented language for non-technical stakeholders.
• Experience working with global and multicultural teams in a matrixed environment.
• Solid knowledge of cybersecurity domains such as networking, cloud and SaaS environments (Azure/AWS), incident response, third-party risk, and security architecture.

Strong decision-making, prioritization, and communication skills, with the ability to perform effectively under pressure.

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• You’ll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.