Senior Analyst, Information Technology Security

Jobgether; Estado de México; Hybrid; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Competitive compensation package

Fully remote within Mexico

International exposure with leadership

Up to 10% travel

Job summary

Jobgether, on behalf of a partner company, seeks a Senior Analyst, Information Technology Security for a remote role based in Mexico. You will shape a global GRC program, collaborate with the CISO, and report to executive leadership, developing policies and controls aligned with NIST CSF 2.0 and CIS Controls.

You will manage IT risk, audits, and stakeholder alignment across functions, delivering metrics and dashboards to inform risk posture and improvement priorities in a remote-first,

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related discipline.
• 5+ years in Information Security, IT Risk Management, IT Audit, GRC or related field.
• Experience developing policies, controls, audit processes, and IT risk initiatives.
• Familiarity with NIST CSF 2.0 and CIS Controls.
• Strong English and Spanish communication; cross-functional collaboration.

Responsibilities

• Lead governance and implementation of cybersecurity policies, standards, and procedures.
• Manage security requirements from customers and third parties.
• Drive control assurance and maturity assessments using NIST CSF 2.0 and CIS Controls.
• Coordinate IT and cybersecurity risk identification, assessment, mitigation, and monitoring.
• Support audits, compliance reviews, and continuous security improvements.
• Develop cybersecurity metrics, dashboards, and executive reports.
• Collaborate with Legal, HR, Finance, Operations, Supply Chain, and Commercial teams.
• Partner with CISO and global leadership to mature GRC strategy and roadmap.

Skills

IT risk mgmt

Policy development

Governance

Risk assessment

Auditing

Stakeholder mgmt

NIST CSF 2.0

CIS Controls

English & Spanish

Education

Bachelor's degree in IT/CS/CY

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Analyst, Information Technology Security based in Mexico. In this fully remote position, you will play a key role in developing and strengthening a global cybersecurity Governance, Risk & Compliance (GRC) program. Working closely with executive leadership, including the Chief Information Security Officer (CISO), you will help shape cybersecurity governance strategies, enhance IT risk management practices, and ensure compliance with industry standards and customer requirements. You will contribute to the development of security policies, frameworks, and internal controls while supporting risk assessments and audit readiness. The role also involves translating complex security information into meaningful metrics and executive-level reports. You will collaborate with cross-functional teams across an international manufacturing environment, helping strengthen the organization's security posture and resilience. This is an opportunity to make a tangible impact on cybersecurity strategy and governance in a global, remote-first setting.

Accountabilities

• Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures.
• Manage customer and third-party security requirements, ensuring compliance with contractual obligations and relevant security standards.
• Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.
• Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization.
• Support internal and external audits, compliance reviews, and the continuous improvement of security controls.
• Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities.
• Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes.
• Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field.
• Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.
• Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.
• Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls.
• Excellent communication skills in both English and Spanish, with the ability to present technical and risk-related information to different audiences.
• Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment.
• Analytical mindset, attention to detail, and the ability to manage multiple priorities independently.
• Preferred qualifications:
  • Professional certifications such as CISA, CISM, or CRISC.
  • Previous experience in the manufacturing or industrial sector.
  • Knowledge of privacy regulations, data protection principles, and related compliance requirements.

Benefits

• Competitive compensation package.
• Health and dental insurance.
• 401(k) retirement savings plan with employer matching contributions.
• Paid vacation and time off.
• Fully remote working arrangement within Mexico.
• Opportunity to work closely with executive cybersecurity leadership and contribute to the development of a global GRC program.
• International and cross-functional exposure within a global manufacturing environment.
• Occasional business travel, with an expected travel commitment of up to 10%.
• Full-time employment opportunity.

We appreciate your interest and wish you the best!