Senior GRC Security Analyst – Fintech (Hybrid in Mexico)

Jobgether; Ciudad de México; Hybrid; MXN 850,000 - 1,100,000; Full time

Benefits offered by this job

Competitive compensation package

Hybrid/remote options

Professional development

Job summary

Jobgether is seeking a Senior Security Analyst – GRC based in Mexico to strengthen information security governance, risk management and regulatory compliance within a fintech environment. You will lead the development and automation of policies, controls and evidence-driven processes to support audits and regulatory readiness.

You will collaborate with technical teams, auditors and senior leadership to align security practices with industry standards and drive continuous improvement.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
• At least 5 years of professional experience in software engineering, information security, security governance, risk management or regulatory compliance.
• Strong knowledge of information security and governance frameworks, including ISO 27001/27002, SOC 2, NIST Cybersecurity Framework, PCI DSS, CIS Controls and GDPR.
• Proven experience in internal and third-party risk management, data protection, security policies, control implementation and compliance monitoring.
• Practical experience with audit preparation, evidence collection, control assessments and remediation management.
• Understanding of applicable regulatory requirements and information security standards within the financial services or fintech sector.
• Experience automating governance, risk management, compliance documentation and audit evidence-collection processes.
• Ability to define and monitor KPIs and KRIs, analyse security performance and communicate risk-related insights to stakeholders.
• Strong analytical, problem-solving and organisational skills, with excellent attention to detail.
• Effective communication and stakeholder management skills, including the ability to translate complex technical and regulatory requirements into clear business recommendations.
• Proactive, collaborative and adaptable approach, with the ability to work independently and manage multiple priorities.

Responsibilities

• Develop, implement and maintain information security policies, standards and procedures in alignment with organisational requirements and industry best practices.
• Monitor and assess applicable regulatory and compliance requirements, including ISO 27001, PCI DSS, SOC 2, CNBV and other relevant frameworks.
• Design and conduct information security risk assessments, documenting findings, evaluating potential impacts and developing appropriate mitigation plans.
• Maintain an up-to-date inventory of security controls and supporting evidence to ensure readiness for internal and external audits.
• Identify opportunities to automate governance, risk management, documentation and evidence-collection processes for certifications and compliance assessments.
• Manage the complete lifecycle of audit findings and observations, ensuring corrective actions are implemented effectively and within established deadlines.
• Develop, monitor and maintain compliance KPIs and KRIs to measure the maturity, performance and effectiveness of security controls.
• Design and deliver organisation-wide security awareness and compliance training programmes to strengthen the internal security culture.
• Assess risks associated with internal and critical third-party vendors, ensuring compliance with contractual security requirements and established standards.
• Act as a key point of coordination between technical teams, audit stakeholders and senior management to support effective governance and risk oversight.

Skills

Governance

Risk management

Audit readiness

Stakeholder communication

Education

Bachelor's degree in CS/IT/SE

Job description

Jobgether is seeking a Senior Security Analyst – GRC based in Mexico to strengthen information security governance, risk management and regulatory compliance within a fintech environment. You will lead the development and automation of policies, controls and evidence-driven processes to support audits and regulatory readiness.

You will collaborate with technical teams, auditors and senior leadership to align security practices with industry standards and drive continuous improvement.