Hybrid Technical PM for Security Assurance & GRC

Delinea; Ciudad de México; Hybrid; MXN 900,000 - 1,300,000; Full time

Benefits offered by this job

Healthcare benefits

Pension/retirement matching

Paid time off

Job summary

Delinea, based in Mexico City, seeks a seasoned Technical Program Manager to lead Governance, Risk, and Compliance (GRC), Internal Assurance, and Offensive Security programs. This hybrid role partners with the Deputy CISO to drive strategic initiatives across engineering, legal, and security teams.

The ideal candidate blends technical governance expertise with strong program management, stakeholder stewardship, and cloud/security framework experience, including SOC 2, ISO 27001, and FedRAMP.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in Technical Program or Project Management, with at least 2 years supporting governance, risk, compliance, assurance/audit, or offensive security programs.
• Proven experience coordinating large, complex security or technology programs across cross-functional engineering, legal, and compliance teams.
• Working knowledge of security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, FedRAMP).
• Familiarity with the offensive security engagement lifecycle (scoping, rules of engagement, testing, reporting, remediation) and cloud platforms (e.g., Azure, AWS).
• Proficiency with project management tools and methodologies (e.g., Agile, Scrum, Kanban).
• Demonstrated ability to keep stakeholders aligned and accountable to commitments while supporting decisions made by program owners and leadership.
• Strong verbal and written communication, time management, and organizational skills, with the ability to communicate technical risk to both technical and non-technical audiences.
• Fluent in English (spoken and written)

Responsibilities

• Coordinate planning, scheduling, and tracking of Deputy CISO organization initiatives in partnership with the Deputy CISO and program leads.
• Support the planning, tracking, and reporting of GRC, Internal Assurance, and Offensive Security initiatives, including compliance certification cycles, internal control assessments, and penetration testing engagements.
• Help create and evolve metrics to define, track, and report on KPIs; provide regular reporting to engineering and security leadership.
• Facilitate operating cadences for the Deputy CISO and direct reports, including planning sessions, status reviews, and steering meetings, capturing decisions, action items, and owners.
• Collaborate with Technical Program Managers across Cybersecurity to capture interdependencies and ensure consistency in planning, tracking, and reporting.
• Coordinate audit and certification readiness activities (e.g., SOC 2, ISO 27001, FedRAMP) on behalf of GRC leads, including evidence collection timelines, control owner follow-ups, and auditor scheduling.
• Coordinate logistics for penetration tests, red team exercises, and third-party assessments on behalf of Offensive Security leads, including scheduling, stakeholder communications, and status tracking.
• Maintain Security Assurance program documentation, including roadmaps, processes, runbooks, and status updates.

Skills

Program management

Stakeholder management

Cross-functional coordination

Agile methodologies

Communication skills

Analytical skills

English fluency

Education

Bachelor’s degree

Master’s degree preferred

Tools

Jira

Confluence

Azure DevOps

GRC platforms

Job description

Delinea, based in Mexico City, seeks a seasoned Technical Program Manager to lead Governance, Risk, and Compliance (GRC), Internal Assurance, and Offensive Security programs. This hybrid role partners with the Deputy CISO to drive strategic initiatives across engineering, legal, and security teams.

The ideal candidate blends technical governance expertise with strong program management, stakeholder stewardship, and cloud/security framework experience, including SOC 2, ISO 27001, and FedRAMP.