Senior Grc Risk Advisory Consultant - Remote (mexico)

Echelon Risk + Cyber; Veracruz; Remote; MXN 550,000 - 850,000; Full time

Benefits offered by this job

Medical insurance

Life insurance

Christmas bonus

Tech stipend

Savings fund 8%

Flexible vacation

Parental leave

Disability insurance

Certifications support

Conferences access

Job summary

Echelon Risk + Cyber is seeking a Senior Risk Advisory Consultant to lead and execute cybersecurity risk engagements from planning to delivery, including governance, risk, and compliance tasks. This remote Mexico role emphasizes strong client communication and the development of incident response playbooks.

You will work on frameworks like NIST CSF, ISO 27001, SOC 2, and CMMC, collaborate with clients, and contribute to proposals and business development.

Qualifications

• 5+ years in cybersecurity industry
• Experience with multiple information security frameworks and best practices (e.g., CIS, NIST, PCI, CMMC, ISO, GLBA, FFIEC, SOX, SOC, HIPAA, HITRUST)
• Ability to lead engagements from scoping to delivery and manage client expectations, timelines, and deliverables
• Experience with incident response, business continuity, and disaster recovery planning preferred
• Provide strategic guidance on tabletop exercise design, incident preparedness, and resilience

Responsibilities

• Lead end-to-end tabletop exercise engagements with realistic client-specific scenarios
• Assist planning, scoping, execution, and reporting of cybersecurity risk and maturity assessments
• Review and assess controls against best practices and frameworks
• Collaborate with clients to develop Incident Response Plans andPlaybooks
• Document results, create client reports, and communicate with client management
• Create client-facing presentations, reports, and analytics
• Support leadership in proposals, budgets, and project plans
• Build strong internal and client relationships through clear communication
• Produce thought leadership for the organization's website blog

Skills

GRC

Engagement leadership

IR planning

Tabletop design

English (B2+)

Client-facing

Education

Bachelor's Degree in IT or Cybersecurity

Tools

Cloud systems

EDR

MDR

SIEM

Vulnerability Scanning

Email Security

Backup/DR

MDM

Firewalls

Networking

IAM/SSO

Job description

About Us At Echelon Risk + Cyber, we believe in defending the basic human right to security and privacy. We are looking for an exceptional Senior Risk Advisory Consultant to support the execution of Risk Advisory client engagements. This includes leading and executing relevant tasks, as well as assisting in developing service deliverables and internal processes that will drive value for the team and clients.

At Echelon Risk + Cyber, we believe in defending the basic human right to security and privacy. We are looking for an exceptional Senior Risk Advisory Consultant to support the execution of Risk Advisory client engagements. This includes leading and executing relevant tasks, as well as assisting in developing service deliverables and internal processes that will drive value for the team and clients.

Our next team member will be authentic, articulate, and passionate about Cybersecurity, and will be unafraid to roll up their sleeves and dive deep into the unknowns, using their security expertise to identify opportunities to increase Echelon Risk + Cyber's overall capabilities internally and for our clients.

At Echelon, you will have the opportunity to engage with systems at the cutting edge of technology. We allow our employees to build from the ground up and make an impact across the organization. We look for driven, proactive people eager to contribute to a distinct and thriving Cybersecurity services organization that can adapt to a rapidly changing environment.

This is a remote position from anywhere in Mexico.

What You Will Do

• Lead end-to-end tabletop exercise engagements, developing realistic, client-specific scenarios that align with organizational people, processes, and technologies and effectively engage technical, management, and executive audiences
• Assist in the planning, scoping, execution, and reporting of cybersecurity risk and maturity assessments against frameworks such as NIST CSF, ISO 27001, SOC 2, and CMMC
• Review and assess security and technology controls against cybersecurity best practices and compliance frameworks
• Collaborate with clients to develop Incident Response Plans, and Incident Response Playbooks tailored to each client's environment and needs
• Document results, create client reports, and communicate results to client management and other stakeholders
• Create client-facing presentations, reports, and analytics
• Assist leadership in the creation of proposals, budgets, work plans, and other business development efforts
• Establish exceptional internal and client relationships using strong communication skills
• Produce thought leadership for the organization's website blog on a regular basis

Your knowledge, skills, and abilities

• 5+ years of related experience in the cybersecurity industry
• Focus on Governance, Risk, and Compliance planning, development, and management
• Experience with a variety of information security frameworks and best practices (e.g., CIS, NIST, PCI, CMMC, ISO, GLBA, FFIEC, SOX, SOC, HIPAA, HITRUST, etc.)
• Ability to lead engagements from scoping through delivery, including managing client expectations, timelines, and deliverables
• Experience with incident response, business continuity, and disaster recovery planning is preferred
• Ability to provide strategic guidance to clients on tabletop exercise design, incident preparedness, and resilience.

Project Management Experience Preferred

• Ability to manage and prioritize multiple projects simultaneously and adapt in a demanding and changing environment
• Although this is not a technical oriented role, knowledge of Cloud systems, applications, security services/tools (e.g., EDR, MDR, SIEM, Vulnerability Scanning, Email Security, Backup/DR, MDM), Firewalls, Basic Networking, Data Security, IAM/SSO, etc., will be beneficial in an advisory capacity
• Ability to mentor and provide guidance to junior consultants and contribute to the development of internal methodologies and best practices
• Strong attention to detail and superior analytical, technical, and problem-solving skills
• Excellent verbal and written communication skills with experience crafting professional messages and adjusting communication style based on audience
• Preferred experience working with financial services, healthcare, or regulated industries Strong English communication (B2+/C1/C2 Level) written and verbal. Authorized to work in Mexico without visa sponsorship. Preferred Qualifications: A Bachelor's Degree in a relevant IT or Cybersecurity major
• Strong background in developing incident response plans, playbooks, and tabletop exercises
• Certifications recommended: CISSP, CISA, CISM, or similar certification
• Experience in client-facing roles with an ability to successfully manage multiple projects at once

Why Echelon

We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality," and we want to allow you the space to bring your full self to work.

We Currently Offer The Following Benefits

• Access to private medical insurance through Met Life
• Life insurance policy via Met Life
• 30-day Christmas bonus and a monthly technology stipend
• Contribution of 8% of the employee's salary to a savings fund
• Flexible vacation policy that allows you to manage your schedule and rest and recharge when you need to.
• Family-friendly benefits, extended parental leave for when you need to spend critical time with new family members, and employer-paid short-term and long-term disability
• Support for individual development through certifications, continued learning, conferences, and more

We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status, or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.