Security Governance & Risk Strategist

Empresa Confidencial; Naucalpan de Juárez; Presencial; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Empresa Confidencial is seeking a Security Governance & Risk Specialist to support the standardization and continuous improvement of the CSO governance framework. You will develop and standardize security policies, coordinate risk management sessions with senior leadership, and oversee third-party security assessments.

Collaborate with Procurement, Legal, Business Units, and external providers to identify and mitigate security risks while ensuring regulatory compliance and protection of assets.

Formación

• Minimum 2 years in cybersecurity, governance, risk, compliance, or related field.
• Preferred 4+ years of relevant professional experience.
• English language proficiency at an intermediate level (reading, writing, speaking).
• Familiarity with PCI DSS, ISO 27001, and security governance practices.

Responsabilidades

• Review and validate security risk requirements with senior leaders and AVPs.
• Communicate risks clearly and define strategies to mitigate identified risks.
• Coordinate quarterly risk management sessions with AVPs and VPs.
• Standardize and maintain CSO policies, procedures, and governance practices.

Conocimientos

Security governance

Risk management

PCI DSS

ISO 27001

Third-party assessments

Stakeholder communication

Policy development

Educación

Bachelor's in CS / IS / Networking / Telecom

Master's in Cybersecurity / IT / MBA (preferred)

Descripción del empleo

Empresa Confidencial is seeking a Security Governance & Risk Specialist to support the standardization and continuous improvement of the CSO governance framework. You will develop and standardize security policies, coordinate risk management sessions with senior leadership, and oversee third-party security assessments.

Collaborate with Procurement, Legal, Business Units, and external providers to identify and mitigate security risks while ensuring regulatory compliance and protection of assets.