Senior Analyst, Information Technology Security

Jobgether; Mexique; À distance; MXN 900 000 - 1 300 000; Plein temps

Avantages offerts par ce poste

Competitive pay

Health and dental insurance

401(k) employer match

Paid vacation and time off

Remote work in Mexico

Work with executive cybersecurity team

Global exposure

Travel up to 10%

Résumé du poste

Jobgether, listing on behalf of a partner company, seeks a Senior Analyst, Information Technology Security based in Mexico. The role is fully remote within Mexico and focuses on developing and strengthening a global cybersecurity GRC program with executive leadership alignment.

You will shape governance strategies, enhance IT risk management, and ensure compliance with industry standards and customer requirements, translating security information into executive metrics and reports.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related discipline.
• At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or related field.
• Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.
• Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.
• Familiarity with NIST CSF 2.0 and CIS Controls.
• Excellent communication in English and Spanish with ability to present technical/risk information to diverse audiences.
• Strong stakeholder management and influencing skills in a global, remote environment.
• Preferred: CISA, CISM, or CRISC; manufacturing/industrial sector experience; knowledge of privacy regulations.

Responsabilités

• Lead development, implementation, and governance of cybersecurity policies, standards, and procedures.
• Manage customer and third-party security requirements with contractual obligations and standards.
• Drive cybersecurity controls maturity assessments using NIST CSF 2.0 and CIS Controls.
• Coordinate IT and cybersecurity risk management activities across the organization.
• Support internal/external audits and continuous improvement of security controls.
• Develop cybersecurity metrics, dashboards, and executive reports for risk exposure and program performance.
• Partner with Legal, HR, Finance, Operations, Supply Chain, and Commercial teams to embed security governance.
• Collaborate with CISO and global leadership to mature the organization's GRC strategy and roadmap.

Connaissances

Bachelor's degree in Information Tech

IT Security

GRC

NIST CSF 2.0

CIS Controls

English/Spanish bilingual

Stakeholder management

Analytical mindset

Formation

Bachelor's degree in Information Technology or related field

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Analyst, Information Technology Security based in Mexico.

In this fully remote position, you will play a key role in developing and strengthening a global cybersecurity Governance, Risk & Compliance (GRC) program. Working closely with executive leadership, including the Chief Information Security Officer (CISO), you will help shape cybersecurity governance strategies, enhance IT risk management practices, and ensure compliance with industry standards and customer requirements. You will contribute to the development of security policies, frameworks, and internal controls while supporting risk assessments and audit readiness. The role also involves translating complex security information into meaningful metrics and executive-level reports. You will collaborate with cross-functional teams across an international manufacturing environment, helping strengthen the organization's security posture and resilience. This is an opportunity to make a tangible impact on cybersecurity strategy and governance in a global, remote-first setting.

Accountabilities

• Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures.

• Manage customer and third‑party security requirements, ensuring compliance with contractual obligations and relevant security standards.

• Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

• Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization.

• Support internal and external audits, compliance reviews, and the continuous improvement of security controls.

• Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities.

• Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes.

• Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap.

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.

• At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field.

• Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.

• Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.

• Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls.

• Excellent communication skills in both English and Spanish, with the ability to present technical and risk‑related information to different audiences.

• Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment.

• Analytical mindset, attention to detail, and the ability to manage multiple priorities independently.

• Preferred qualifications:

  • Professional certifications such as CISA, CISM, or CRISC.

  • Previous experience in the manufacturing or industrial sector.

  • Knowledge of privacy regulations, data protection principles, and related compliance requirements.

Benefits:

• Competitive compensation package.

• Health and dental insurance.

• 401(k) retirement savings plan with employer matching contributions.

• Paid vacation and time off.

• Fully remote working arrangement within Mexico.

• Opportunity to work closely with executive cybersecurity leadership and contribute to the development of a global GRC program.

• International and cross‑functional exposure within a global manufacturing environment.

• Occasional business travel, with an expected travel commitment of up to 10%.

• Full‑time employment opportunity.