Senior Associate, Cybersecurity Risk Assessment- Advanced English

KTSA - KPMG Technology Services Americas; Región Centro; Híbrido; MXN 600.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Extended maternity leave

Learning programs & certification

Daycare support

Wellness program

Medical plan

Life insurance

Car insurance

Descripción de la vacante

KTSA – KPMG Technology Services Americas in Mexico seeks an experienced cybersecurity professional to conduct risk assessments, define security requirements, and coordinate remediation with project teams. You will apply secure coding principles, cloud/AI security knowledge, and control frameworks (NIST, ISO, PCI) to protect client assets and drive security improvements in a matrixed environment.

Join a collaborative, inclusive workplace with learning programs, mentorship, and clear career paths

Formación

• Bachelor’s degree or equivalent work experience with 3–5 years in information security assessment or compliance.
• CISSP or CRISC preferred.
• Strong understanding of cybersecurity principles, controls, and technologies.
• Familiarity with NIST 800-53/171/66, CMMC, NIST Framework, ISO, HITRUST, PCI.

Responsabilidades

• Conduct cybersecurity risk assessments for technology-enabled projects using standard frameworks and controls.
• Define security requirements, perform control reviews, and manage residual risk.
• Translate security findings into remediation actions and coordinate with vendors and teams.
• Serve as liaison between project teams and Information Security, ensuring timelines and controls are met.
• Promote security best practices and continuous process improvements.
• Foundational expertise in cloud and AI security, including IAM, data protection, and risk assessment.

Conocimientos

Information security assessment

Security controls

Communication skills

Educación

Bachelor's degree or equivalent

Descripción del empleo

We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore.

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

• Experience a collaborative, inclusive, and multicultural workplace where you belong.
• Excel by creating impact and leaving your mark on global projects.
• Expand your potential with real career paths, learning programs, and mentorship.
• Express your individuality — come as you are, and thrive as your authentic self.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS, our total rewards program, designed to support your well-being, goals, and personal milestones.

Key Responsibilities:

• Conduct cybersecurity risk assessments for technology-enabled projects using industry-standard and firm-specific control frameworks. Define security requirements, perform control and evidence reviews, facilitate security testing (including penetration testing and static application security testing (SAST)), and manage residual risk.
• Apply knowledge of software development, secure coding principles, and emerging security standards to identify risks, communicate findings, and recommend remediation or compensating controls.
• Partner with vendors and project teams to track remediation activities, validate corrective actions, and ensure identified risks are addressed appropriately.
• Serve as the primary liaison between project teams and Information Security, coordinating security resources and ensuring security objectives, timelines, and control requirements are met.
• Support the continuous improvement of security processes and promote cybersecurity best practices through knowledge sharing, skills development, and process enhancements.
• Foundational expertise in cloud and AI security, including cloud architecture, identity and access management, data protection, secure coding practices, and risk assessment methodologies for cloud-based and AI-enabled applications.

Qualifications:

• Bachelor’s degree or equivalent work experience with 3-5 years of recent experience in information security assessment or compliance.
• CISSP or CRISC preferred.
• Strong understanding of cybersecurity principles, controls, and technologies.
• Familiarity with NIST 800-53, NIST 800-171, NIST 800-66, CMMC, NIST Framework, ISO, HITRUST, PCI, and/or other relevant control frameworks.
• Ability to positively influence, mentor and be a credible source of knowledge to less experienced team members.
• Strong verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.

Familiarity with:

• CIA Security Triage
• SSL TLS
• Encription in transit and encription at rest
• Knowledge of cryptography
• SOC 1, SOC 2, SOC 3 reports
• Type 1 and Type 2
• NIST 800 series
• 800-53
• OWASP TOP10

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

• Extended maternity, paternity, and adoption leaves
• Learning opportunities, training, and certification programs
• Extended marriage leave and daycare support
• Wellness and Employee Assistance Programs (EAP)
• Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit www.ktsa.com.mx to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of flexible working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!