Senior IT Security & Compliance Lead (Hybrid)

Nestle SA; Ciudad de México; Híbrido; MXN 900.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Restaurant card

Mobility plan

Hybrid working environment

Descripción de la vacante

Nestlé SA in Mexico City is seeking a Senior Specialist IT Security and Compliance to support the market's ISMS, GRC program, and cybersecurity risk management. You will partner with business and global security teams to identify, assess, and mitigate information security risks while ensuring adherence to Nestlé policies and regulatory requirements.

The role advises on security controls, governance processes, and risk mitigation strategies, driving continuous improvement across security and

Formación

• Bachelor's degree in Cybersecurity, Information Technology, Audit, Risk Management, or related discipline.
• 5+ years of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), Audit, Compliance, Privacy, or related field.
• Experience with information security frameworks such as ISO 27001, NIST, COBIT, CIS Controls, or ITIL.
• Experience performing risk assessments, compliance reviews, audits, and remediation activities.
• Proven ability to manage stakeholders and influence outcomes across technical and business teams.
• Strong analytical, communication, and project management skills.
• Professional security, risk, or audit certifications (CISSP, CISA, CISM, CRISC, ISO 27001) preferred.
• Experience with Archer, ServiceNow, or similar GRC platforms preferred.

Responsabilidades

• Security Governance: Support and continuously improve the market's ISMS, GRC program, and cybersecurity governance, including documentation, risk registers, and rollout of global security standards.
• Risk & Compliance: Identify, assess, and report security, privacy, and technology risks using the Nestlé Cyber Risk Framework, and drive corrective actions with business and IT partners.
• Cloud Compliance: Co-own the market Cloud Compliance Framework, ensuring applications and cloud services are secure and compliant throughout their lifecycle.
• Audit Support: Coordinate internal, external, and regulatory audits, providing evidence and tracking findings through to closure.
• Metrics & Improvement: Oversee vulnerability management governance, report SCIs and KRIs, and contribute to dashboards and executive reporting that drive continuous improvement.
• Stakeholder Partnership: Act as a trusted advisor to business and technology teams, and lead security awareness and capability-building initiatives.

Conocimientos

Security governance

Risk & compliance

Cloud security

Audit coordination

Stakeholder management

Communication

Project management

Security awareness

Educación

Bachelor's degree in Cybersecurity/Information Security

Herramientas

Archer

ServiceNow

Descripción del empleo

Nestlé SA in Mexico City is seeking a Senior Specialist IT Security and Compliance to support the market's ISMS, GRC program, and cybersecurity risk management. You will partner with business and global security teams to identify, assess, and mitigate information security risks while ensuring adherence to Nestlé policies and regulatory requirements.

The role advises on security controls, governance processes, and risk mitigation strategies, driving continuous improvement across security and