Oficial en Jefe de Seguridad de la Información (CISO)

DolarApp; Ciudad de México; Presencial; MXN 2,770,000 - 3,695,000; Jornada completa

Descripción de la vacante

A leading fintech company in Mexico is seeking an experienced Chief Information Security Officer (CISO) to define and implement its information security strategy. You will work closely with executive leadership and regulators to ensure the security of the organization’s systems and data. The ideal candidate has over 10 years of experience in information security leadership and a strong background in compliance with local regulatory standards. This role offers competitive salary and stock options as part of the benefits.

Servicios

Competitive salary

Sign-on stock options bonus

Discretionary performance bonus

Paid annual leave

Latest technology to work with

Strong team support for skill improvement

Formación

• 10+ years of progressive experience in information security leadership.
• At least 5 years in a senior security management or CISO role.
• Deep knowledge of regulatory frameworks in Mexico and international standards.

Responsabilidades

• Define and oversee the implementation of information security policies.
• Lead the detection and response process for information security incidents.
• Provide monthly information security management reports to executive leadership.

Conocimientos

Information security leadership

Regulatory compliance knowledge

Governance, Risk Management, Compliance (GRC)

Incident response

Leadership and communication skills

Educación

Advanced degree in Information Security, Computer Science or related field

Relevant certifications (e.g., CISM, CISSP, CISA, CRISC)

Descripción del empleo

What we're looking for

We are seeking an experienced Chief Information Security Officer (CISO) to lead our Information Security function in Mexico. This role is accountable for defining, implementing, and continuously improving the organization’s information security policies, governance, and controls in alignment with regulatory requirements (CNBV, Banco de México) and industry best practices. As CISO, you will act as the primary authority on information security for a regulated Fintech (IFPE), ensuring the confidentiality, integrity, and availability of critical systems and data. You will collaborate closely with executive leadership, regulators, and technical teams to safeguard the organization’s technology infrastructure, services, and customer trust.

What you\'ll be doing

• Define, approve, and oversee the implementation of information security policies, standards, and procedures.
• Maintain and further develop the IFPE’s Information Security Master Plan and ensure it is reviewed and updated at least annually.
• Verify that access profiles and privileges are aligned with job roles and authorize their assignment across internal and third-party infrastructure.
• Ensure secure configuration and monitoring of critical technology systems, including operating systems, databases, and cloud environments.
• Approve and monitor remediation measures for deficiencies identified in audits, assessments, or incidents.
• Lead the detection, response, and recovery process for information security incidents and oversee the incident response team.
• Report incidents, corrective actions, and preventive measures to executive leadership in a timely manner.
• Oversee annual security training and awareness programs for employees, customers, and third-party providers.
• Provide monthly information security management reports and risk indicator assessments to the Sole Administrator.
• Respond to information security requirements issued by CNBV, Banco de México, and internal stakeholders.
• Ensure that sensitive information handled by providers is encrypted and establish procedures for decryption when required.

What you\'ll need

• 10+ years of progressive experience in information security leadership, with at least 5 years in a senior security management or CISO role.
• Deep knowledge of regulatory frameworks in Mexico (CNBV, Banco de México, Fintech Law) and international standards (ISO 27001, NIST, PCI DSS).
• Strong expertise in governance, risk management, and compliance (GRC) in financial services.
• Proven experience leading large-scale incident response, risk assessment, and audit remediation efforts.
• Experience managing access controls and privileged accounts in complex technology environments.
• Excellent leadership and communication skills, with the ability to engage with regulators, executives, and technical teams.
• Advanced degree in Information Security, Computer Science, or related field (preferred).
• Relevant certifications (e.g., CISM, CISSP, CISA, CRISC).

Benefits

• Competitive salary
• Sign-on stock options bonus, so you become part of the success of the company
• Discretionary performance bonus (stock options)
• Paid annual leave
• Latest technology to work with
• Strong team that will help you improve your skills