Senior Information Security & GRC Consultant (Remote)

Placements24; Monterrey; Hybrid; MXN 1,544,000 - 3,088,000; Full time

Benefits offered by this job

Remote work from Mexico

Competitive hourly rate

Flexible schedule

Professional development opportunities

Job summary

Placements24 is seeking an experienced Information Security Consultant specializing in Governance, Risk, and Compliance (GRC) for a remote contract engagement. This role guides clients through regulatory landscapes and helps establish robust information security frameworks.

You will assess risks, develop compliance strategies, and ensure adherence to ISO 27001, NIST CSF, COBIT, and SOC 2. Strong communication and ability to translate technical requirements into business recommendations are

Qualifications

• 6+ years in information security with GRC focus.
• Experience in risk assessments and policy development.
• Familiarity with data privacy laws and regulatory regs.

Responsibilities

• Conduct information security risk assessments and gap analyses.
• Develop and implement GRC programs, policies, and procedures.
• Advise clients on compliance with regulations and standards (GDPR, CCPA, ISO 27001, NIST CSF).
• Assist clients in preparing for and undergoing security audits and certifications.
• Develop security awareness training materials and programs.
• Evaluate and recommend security technologies to support GRC objectives.
• Analyze security incidents from a governance perspective and assist remediation.
• Prepare detailed reports and presentations on security posture and compliance status.
• Stay abreast of evolving cybersecurity threats and regulatory changes.

Skills

GRC expertise

Risk assessment

Policy development

Regulatory knowledge

Security governance

Analytical skills

Communication skills

Education

Bachelor's or Master's degree in Information Security / CS / Business

Tools

ISO 27001

NIST CSF

COBIT

SOC 2

Job description

Placements24 is seeking an experienced Information Security Consultant specializing in Governance, Risk, and Compliance (GRC) for a remote contract engagement. This role guides clients through regulatory landscapes and helps establish robust information security frameworks.

You will assess risks, develop compliance strategies, and ensure adherence to ISO 27001, NIST CSF, COBIT, and SOC 2. Strong communication and ability to translate technical requirements into business recommendations are