Líder Senior de Gestión de Ciber Riesgo

09516 Banco Nacional De Mexico, S.A., Integrante Del Grupo Financiero Banamex; Xico; On-site; MXN 1,200,000 - 2,400,000; Full time

Job summary

09516 Banco Nacional De Mexico, S.A., Integrante Del Grupo Financiero Banamex is seeking a Senior Information Security Program Manager to drive the cyber risk program, governance, and risk-based decisions. The role focuses on strategic IS directions, policy alignment, and executive-level risk reporting.

The position requires leading a team, coordinating with business and IT leaders, and ensuring compliance with regulatory frameworks and security controls across critical assets.

Qualifications

• Minimum 15+ years of security, risk or governance experience.
• Bachelor’s degree or higher in a related field; Master’s degree preferred.
• Demonstrated ability to lead large cyber risk programs.
• Experience with regulatory audits and third-party risk management.
• Ability to translate technical risk into business impact.

Responsibilities

• Plan and execute the IS strategy and security solutions across areas.
• Advise business and IT leaders on risk management decisions.
• Align IS program with business strategy and leadership goals.
• Oversee budgeting, planning, policy, and future strategy formulation.
• Manage a team, coach analysts, and allocate work.

Skills

Experience leadership

Advanced networking

Technical certifications

Policy interpretation

GRC / risk management

Strong communication

Education

Bachelor’s degree/University degree or equivalent

Master’s degree preferred

Job description

09516 Banco Nacional De Mexico, S.A., Integrante Del Grupo Financiero Banamex is seeking a Senior Information Security Program Manager to drive the cyber risk program, governance, and risk-based decisions. The role focuses on strategic IS directions, policy alignment, and executive-level risk reporting.

The position requires leading a team, coordinating with business and IT leaders, and ensuring compliance with regulatory frameworks and security controls across critical assets.