Cyber Risk & Compliance Leader - Hybrid Role

Nestle SA; Ciudad de México; Híbrido; MXN 850.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Restaurant card

Mobility plan

Hybrid work environment

Descripción de la vacante

Nestlé is seeking a Senior Specialist, Information Security and Compliance to support the market's ISMS and GRC program while managing cybersecurity risks. You will partner with business and IT to ensure controls, compliance obligations, and governance processes are adhered to across the landscape.

You will own cloud security and audit coordination, drive remediation actions, and contribute to executive dashboards. Hybrid work model and strong growth opportunities offered.

Formación

• Bachelor’s degree in cybersecurity, IT, audit, risk management, or related field required.
• Minimum of 5+ years in information security, cybersecurity, GRC, audit, or privacy.
• Experience with ISO 27001, NIST, COBIT, CIS Controls, or ITIL frameworks.
• Experience performing risk assessments, compliance reviews, audits, and remediation.
• Professional security/risk/audit certifications (CISSP, CISA, CISM, CRISC, ISO 27001) preferred.

Responsabilidades

• Support and improve the market’s ISMS, GRC program, and cybersecurity governance.
• Identify, assess, and report security, privacy, and tech risks; drive corrective actions.
• Co-own the market Cloud Compliance Framework and lifecycle security.
• Coordinate internal, external, and regulatory audits with evidence and closures.
• Oversee vulnerability governance, report SCIs and KRIs, aid dashboards and reporting.
• Partner with business and IT to lead security awareness and capability-building.

Conocimientos

Information Security

Governance

Risk Management

Compliance

Auditing

Educación

Bachelor's degree in Cybersecurity, Information Technology, Audit, Risk Management, Business Administration, or related discipline

Herramientas

Archer

ServiceNow

Descripción del empleo

Nestlé is seeking a Senior Specialist, Information Security and Compliance to support the market's ISMS and GRC program while managing cybersecurity risks. You will partner with business and IT to ensure controls, compliance obligations, and governance processes are adhered to across the landscape.

You will own cloud security and audit coordination, drive remediation actions, and contribute to executive dashboards. Hybrid work model and strong growth opportunities offered.