Cybersecurity GRC Specialist

TechMahindra Cloud Services; México; A distancia; MXN 900,000 - 1,200,000; Jornada completa

Descripción de la vacante

A leading technology firm in Mexico is seeking a Cybersecurity GRC Specialist to implement risk management frameworks and govern compliance efforts. You will engage with third-party risk management and ensure adherence to regulatory standards. The ideal candidate has strong interpersonal skills, relevant certifications, and experience in cybersecurity governance. This position offers remote work possibilities and opportunities for professional growth.

Servicios

Work with skilled IT professionals

Mentorship and learning opportunities

Benefits above the law

Formación

• 5+ years of experience in Third-Party Risk Management.
• Relevant certifications such as ISO 27001, CRISC, CISA, CISSP.
• Strong understanding of risk domains and regulatory compliance.

Responsabilidades

• Implement and manage TPRM processes.
• Execute risk and compliance assessments.
• Lead client engagements from a GRC perspective.

Conocimientos

Third-Party Risk Management

Cyber Security Governance

Policy Exception Handling

Interpersonal Skills

Educación

Degree in Information Systems or Computer Science

Advanced degree in Cybersecurity or related field

Herramientas

Archer

Descripción del empleo

This position is also open to work remotely from anywhere in Mexico

Overview

We’re looking for a Cybersecurity GRC Specialist.

Role Overview: We are seeking a highly skilled and motivated Third party Risk Management, Cyber Security Governance, Risk & Compliance Specialist to join our team. The ideal candidate will have extensive experience in Third-Party Risk Management (TPRM), policy exception handling, and setting up risk and compliance frameworks and processes. This role requires a strong understanding of risk domains, regulatory compliance, and industry best practices. The candidate should be capable of leading client engagements from a GRC perspective and possess excellent interpersonal skills.

Key Responsibilities

• Implement and manage TPRM end-to-end processes, including policy exception handling and cyber security governance.
• Execute risk and compliance assessments, and drive remediation activities.
• Understand and manage cyber risk domains such as access control, operational security, data protection and privacy, vulnerability management, backup and recovery, application security, and business continuity.
• Ensure compliance with various regulatory requirements (e.g., HITRUST, PCI DSS etc).
• Apply industry best practices (e.g., ISO 27001, NIST, COBIT) in designing and documenting GRC processes and assessment frameworks.
• Archer Knowledge is Mandatory.
• Understand and manage application security risks and controls.
• Lead client engagements from a GRC perspective, demonstrating strong ownership and high impact.

Qualifications

• Degree in Information Systems, Computer Science, or equivalent experience.
• Advanced degree in Engineering, Cybersecurity, Information Assurance, Information Security, Information Systems, or Computer Science is preferred.
• Relevant certifications such as ISO 27001, CRISC, CISA, CISSP, or the willingness and motivation to obtain similar certifications.
• Strong interpersonal skills and the ability to work collaboratively with clients and team members.

Preferred Skills

• Experience in Supplier Risk Management.
• Expertise in Control Testing.
• Proficiency in Policy Exception Handling.

What you can expect from us

At Tech Mahindra, what distinguishes us from other teams is the comfortable environment which engenders trust within teams and with our customers. Trust and openness leads to quality, innovation, commitment to deliverables, efficiency and cost-effectiveness for all our customers.

• Work with some truly remarkable IT engineers, architects, specialists and more.
• We’re growing at a phenomenal pace and we’d like some company.
• Hear your voice, nurture your talent and help you strengthen your footprint!
• Benefits above the law
• Mentorship, and opportunities to grow and learn

This position offers a unique opportunity to contribute to our cyber security governance and risk management efforts, ensuring our clients maintain robust and compliant security postures.

Privacy and Data

If you apply for this opportunity we will get your resume and its contain personal data whose treatment has been authorized by its owner for Digital OnUs, S. de RL de CV (the "Company"). If you are not the owner of this information or have no relation whatsoever with the subjects treated in it, you are requested in the most attentive way not to make copies of it and / or its attached files and delete it immediately, under the risk of being considered as responsible for the unauthorized treatment of personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other applicable regulations. If you are the owner of personal data in possession of the Company and wish to obtain further information regarding the processing of your personal data or the exercise of your ARCO rights, please consult our integral privacy notice on the website https://www.digitalonus.com/privacy-policy/