Senior Cyber Risk & GRC Specialist

Levi Strauss & Co.; Ciudad de México; Presencial; MXN 700.000 - 1.100.000; Jornada completa

Descripción de la vacante

Levi Strauss & Co. in Mexico City is seeking a Sr. Cyber Risk Analyst to implement the cyber risk strategy, manage the OneTrust GRC tool, and lead internal and third-party risk assessments.

You will drive remediation plans, maintain the cyber risk register, and deliver executive risk insights. Key qualifications include 3+ years in risk management, ISO/NIST framework experience, and relevant certifications (or pursuing).

Formación

• BS or MS in Business, Computer Science, Information Security or related field.
• Industry security certifications (CISSP, CISM, CRISC) or pursuing within 1 year.
• 3+ years in risk management, governance, and cybersecurity with focus on business outcomes.
• 3+ years of internal and 3rd party risk assessments.
• Experience with PCI-DSS, HIPAA, and SOX.
• Experience with ISO 27005, NIST CSF, CIS Top 18, and MITRE ATT&CK.
• 1-3 years managing a global team of associates/contractors.
• Knowledge of cybersecurity principles (risk management, threat/vuln mgmt, incident response).
• Strong data, metrics, KPI presentation abilities.
• Excellent communication for remote/online work.

Responsabilidades

• Implement cyber risk strategy and govern the GRC tool OneTrust.
• Perform internal and 3rd party security risk assessments.
• Manage risk remediation plans with deadlines and progress tracking.
• Develop and deliver risk reports to senior leadership.
• Maintain enterprise cyber risk register with remediation tasks.
• Contribute to CCM approach using GRC workflows and dashboards.
• Create KRIs using OneTrust and PowerBI.
• Support PCI-DSS and other compliance audits.

Conocimientos

Risk management

Governance

Regulatory compliance

Data analysis

Security incident response

Communication

Educación

BS or MS in Business, Computer Science, Information Security or related field

Herramientas

OneTrust GRC

PowerBI

Descripción del empleo

Levi Strauss & Co. in Mexico City is seeking a Sr. Cyber Risk Analyst to implement the cyber risk strategy, manage the OneTrust GRC tool, and lead internal and third-party risk assessments.

You will drive remediation plans, maintain the cyber risk register, and deliver executive risk insights. Key qualifications include 3+ years in risk management, ISO/NIST framework experience, and relevant certifications (or pursuing).