Senior Cybersecurity Risk Assessment Specialist

KTSA - KPMG Technology Services Americas; Región Centro; Híbrido; MXN 600.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Extended maternity leave

Learning programs & certification

Daycare support

Wellness program

Medical plan

Life insurance

Car insurance

Descripción de la vacante

KTSA – KPMG Technology Services Americas in Mexico seeks an experienced cybersecurity professional to conduct risk assessments, define security requirements, and coordinate remediation with project teams. You will apply secure coding principles, cloud/AI security knowledge, and control frameworks (NIST, ISO, PCI) to protect client assets and drive security improvements in a matrixed environment.

Join a collaborative, inclusive workplace with learning programs, mentorship, and clear career paths

Formación

• Bachelor’s degree or equivalent work experience with 3–5 years in information security assessment or compliance.
• CISSP or CRISC preferred.
• Strong understanding of cybersecurity principles, controls, and technologies.
• Familiarity with NIST 800-53/171/66, CMMC, NIST Framework, ISO, HITRUST, PCI.

Responsabilidades

• Conduct cybersecurity risk assessments for technology-enabled projects using standard frameworks and controls.
• Define security requirements, perform control reviews, and manage residual risk.
• Translate security findings into remediation actions and coordinate with vendors and teams.
• Serve as liaison between project teams and Information Security, ensuring timelines and controls are met.
• Promote security best practices and continuous process improvements.
• Foundational expertise in cloud and AI security, including IAM, data protection, and risk assessment.

Conocimientos

Information security assessment

Security controls

Communication skills

Educación

Bachelor's degree or equivalent

Descripción del empleo

KTSA – KPMG Technology Services Americas in Mexico seeks an experienced cybersecurity professional to conduct risk assessments, define security requirements, and coordinate remediation with project teams. You will apply secure coding principles, cloud/AI security knowledge, and control frameworks (NIST, ISO, PCI) to protect client assets and drive security improvements in a matrixed environment.

Join a collaborative, inclusive workplace with learning programs, mentorship, and clear career paths