Senior GRC Risk Advisor — Remote Mexico

Echelon Risk + Cyber; San Luis Potosí; Remote; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Private medical insurance

Life insurance

Technology stipend

Company-wide bonuses

Flexible vacation

Parental leave

Disability benefits

Professional development

Job summary

Echelon Risk + Cyber is seeking a Senior Risk Advisory Consultant to lead and deliver cybersecurity risk engagements from a remote position in Mexico. You will oversee tabletop exercises, risk assessments, and incident response planning, working with clients on governance, frameworks, and controls.

Ideal candidates have 5+ years in cybersecurity, strong communication skills, and experience across frameworks like NIST, ISO, SOC, and CMMC.

Qualifications

• 5+ years in cybersecurity with governance, risk and compliance focus.
• Experience with multiple security frameworks and best practices.
• Ability to lead engagements from scoping to delivery and manage client expectations.

Responsibilities

• Lead tabletop exercise engagements with client-specific scenarios.
• Plan, scope, execute and report risk and maturity assessments (NIST CSF, ISO 27001, SOC 2, CMMC).
• Review security controls against best practices and compliance frameworks.
• Develop Incident Response Plans and Playbooks for clients.
• Create client reports, presentations, and analytics for management.
• Support business development through proposals and budgets.
• Foster strong internal and client relationships and contribute to methodologies.

Skills

Governance & Compliance

Risk Advisory

Incident Response

Client Engagement

Security Frameworks

Education

Bachelor's Degree in IT/Cybersecurity

CISSP/CISA/CISM certifications

Tools

EDR

MDR

SIEM

Vulnerability Scanning

IAM/SSO

Job description

Echelon Risk + Cyber is seeking a Senior Risk Advisory Consultant to lead and deliver cybersecurity risk engagements from a remote position in Mexico. You will oversee tabletop exercises, risk assessments, and incident response planning, working with clients on governance, frameworks, and controls.

Ideal candidates have 5+ years in cybersecurity, strong communication skills, and experience across frameworks like NIST, ISO, SOC, and CMMC.