Hybrid: Senior IT Security & Compliance Leader

Nestle SA; Xico; Hybrid; MXN 900,000 - 1,400,000; Full time

Benefits offered by this job

Hybrid work setup

Health insurance

Employee benefits package

Campus facilities and services

Job summary

Nestlé Mexico is seeking a Senior Specialist IT Security and Compliance to support the ISMS, GRC, and cybersecurity risk management. You will partner with business, technology, and global security teams to ensure risks are identified and controlled in line with Nestlé policies and regulatory requirements.

The role covers security governance, risk & compliance, cloud security, audits, and metrics. You will build awareness, drive improvements, and serve as a trusted advisor to drive secure,

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Audit, Risk Management, Business Administration, or related discipline.
• 5+ years of experience in Information Security, Cybersecurity, GRC, Audit, Compliance, Privacy, or related field.
• Experience with information security frameworks such as ISO 27001, NIST, COBIT, CIS Controls, or ITIL.
• Experience performing risk assessments, compliance reviews, audits, and remediation activities.
• Ability to manage stakeholders and influence outcomes across technical and business teams.
• Strong analytical, communication, and project management skills.
• Professional security, risk, or audit certifications (CISSP, CISA, CISM, CRISC, ISO 27001) preferred.
• Experience with Archer, ServiceNow, or similar GRC platforms preferred.

Responsibilities

• Security Governance: Support and improve the market's ISMS, GRC program, and cybersecurity governance.
• Risk & Compliance: Identify, assess, and report security, privacy, and technology risks; drive actions with partners.
• Cloud Compliance: Co-own the market Cloud Compliance Framework for secure cloud services.
• Audit Support: Coordinate internal, external, and regulatory audits, providing evidence and tracking findings through to closure.
• Metrics & Improvement: Oversee vulnerability management governance and executive reporting.
• Stakeholder Partnership: Act as trusted advisor to business and technology teams; lead security awareness initiatives.

Skills

Risk management

Governance & Compliance

Stakeholder management

Project management

Communication skills

Analytical skills

Security controls

Education

Bachelor's degree

Tools

Archer

ServiceNow

Job description

Nestlé Mexico is seeking a Senior Specialist IT Security and Compliance to support the ISMS, GRC, and cybersecurity risk management. You will partner with business, technology, and global security teams to ensure risks are identified and controlled in line with Nestlé policies and regulatory requirements.

The role covers security governance, risk & compliance, cloud security, audits, and metrics. You will build awareness, drive improvements, and serve as a trusted advisor to drive secure,