Cybersecurity Assurance Analyst

NOV; Monterrey; On-site; MXN 420,000 - 640,000; Full time

Job summary

NOV is seeking an Analyst to strengthen IT governance and security controls in Monterrey. You will perform audits against ISO 27001, IEC 62443, SOC1/2, and SOX, drive an automation-first approach, and guide business functions on compliance issues.

You will collaborate with IT teams to implement controls, map to frameworks, and track corrective actions while supporting changes to digital products and operations.

Qualifications

• Knowledge of network infrastructure and concepts.
• Experience designing and evaluating information security regulatory controls in an audit role.
• Experience with troubleshooting and implementation of technologies.
• Knowledge of project management principles.

Responsibilities

• Apply an “automation first” mindset to reduce manual efforts and enable provisioning.
• Conduct IT technical and process internal audits in compliance with ISO 27001, IEC 62443, SOC1/2, SOX, and NIST.
• Participate in developing and implementing new digital products to support compliance requirements.
• Provide guidance to business units on compliance and security matters.
• Coordinate and participate in audit tasks to prepare managers and teams for testing and resolve findings.
• Assist in controls documentation for NOV Customer Data Services across security, change management, and IT operations.
• Help monitor open corrective actions from audits.
• Support detailed testing of controls to ensure risks are identified and controls operate effectively.
• Monitor IT team activities for policy compliance with monthly/quarterly/annual reviews.
• Assist with mapping frameworks and ITGRC tools to ISO 27001, IEC 62443, SOC1/2, and SOX.
• Other duties as assigned by leadership.

Skills

Network basics

Regulatory controls

Audit experience

Project management

Communication skills

Tools

ITGRC tools

Job description

Job Description

As an Analyst, you will have the following responsibilities:

• Apply an “automation first” mindset to reduce manual efforts and enable provisioning.
• Conducts IT technical and process internal audits in compliance with ISO 27001, IEC 62443, SOC1/2, SOX standards, and NIST cybersecurity framework
• Participate in developing and implementing new digital products to ensure functionality required to support required compliance.
• Provide guidance to business functions on compliance/security-related matters.
• Coordinate and participate in audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings.
• Assist in controls implementation, including documentation of processes and procedures to address NOV Customer Data Services for Application Information Security, Change Management, and IT Operations areas.
• Assist in monitoring open corrective action items from audits.
• Support and manage detailed testing of controls to ensure risks are appropriately identified, and associated audit procedures are applied, related controls are designed and operating effectively, and mitigate the identified risks.
• Monitor activities of the IT team to ensure compliance with internal policies and procedures, including monthly, quarterly, and annual activity reviews.
• Assist with framework mappings and ITGRC tool/process to ensure compliance with frameworks such as ISO 27001, IEC 62443, SOC1/2, and SOX.
• Other duties as assigned by organization leadership

Requirements

RESPONSIBILITIES

• Familiarity with server/cloud services
• Strong ability to work collaboratively with others, to influence based on knowledge and experience
• Excellent written and verbal communications skills
• You are a self-starter with the dedication to work independently and as part of a team; the ability to multi-task
• You thrive in dynamic environments with multiple changing priorities, where prioritization and time management are necessary tools
• Strong organizational and analytical skills; detail-oriented yet able to understand impacts across multiple projects and systems

Qualifications

Preferred Skills and Experience

• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
• Experience designing and evaluating information security regulatory controls in an audit role
• Experience and troubleshooting and implementation of technologies
• Knowledge of project management