Security GRC Lead: Policy, Risk & PCI

Gamma Recruitment; Naucalpan de Juárez; On-site; MXN 420,000 - 780,000; Full time

Job summary

Gamma Recruitment seeks a Security Governance & Risk Specialist to support the standardization and continuous improvement of the CSO governance framework. This role develops and standardizes security policies, coordinates risk management sessions with senior leadership, and promotes security awareness across the organization.

The position collaborates with AVPs, Vice Presidents, Procurement, Legal, and external providers to identify, communicate, and mitigate security risks while ensuring

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Networking, Telecommunications, or a related field.
• Preferred: Master’s degree in Cybersecurity, Information Technology, Business Administration (MBA), or a related field.

Responsibilities

• Review and validate security risk requirements with senior leaders and AVPs.
• Communicate security risks and findings to stakeholders and define remediation strategies.
• Coordinate and lead quarterly security risk management sessions with AVPs and Vice Presidents.
• Standardize CSO policies, procedures, and governance practices.
• Coordinate third‑party security assessment processes and ensure compliance with requirements.
• Collaborate with Procurement, Legal, and business units to follow up on assessments.
• Recommend remediation plans when requirements aren’t met.
• Maintain and update CSO policies in line with security standards.
• Maintain security awareness programs and publish awareness communications.

Skills

Security governance

Risk management

Cybersecurity

Regulatory compliance

Third-party assessments

Security policies

Education

Bachelor's degree in Computer Science or related field

Master's degree in Cybersecurity/IT/MBA (preferred)

Job description

Gamma Recruitment seeks a Security Governance & Risk Specialist to support the standardization and continuous improvement of the CSO governance framework. This role develops and standardizes security policies, coordinates risk management sessions with senior leadership, and promotes security awareness across the organization.

The position collaborates with AVPs, Vice Presidents, Procurement, Legal, and external providers to identify, communicate, and mitigate security risks while ensuring