Senior Security & GRC Analyst - Hybrid/Remote Fintech

Jobgether; Ciudad de México; Hybride; MXN 900 000 - 1 800 000; Plein temps

Avantages offerts par ce poste

Hybrid work arrangement

Fully remote opportunities

Professional development

Collaborative team

Fintech exposure

Résumé du poste

Jobgether is seeking a Senior Security Analyst - GRC to strengthen information security governance, risk management and regulatory compliance in a growing fintech environment in Mexico. You will drive policies, controls and compliance programs to protect critical operations and sensitive information.

You will collaborate with technical teams, auditors and leadership to align security practices with ISO 27001, PCI DSS, SOC 2, NIST and GDPR, and advance automation, monitoring and risk oversight

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
• 5+ years of professional experience in software engineering, information security, security governance, risk management or regulatory compliance.
• Strong knowledge of information security and governance frameworks, including ISO 27001/27002, SOC 2, NIST Cybersecurity Framework, PCI DSS, CIS Controls and GDPR.
• Proven experience in internal and third-party risk management, data protection, security policies, control implementation and compliance monitoring.
• Practical experience with audit preparation, evidence collection, control assessments and remediation management.

Responsabilités

• Develop, implement and maintain information security policies, standards and procedures in alignment with organisational requirements and industry best practices.
• Monitor and assess applicable regulatory and compliance requirements, including ISO 27001, PCI DSS, SOC 2, CNBV and other relevant frameworks.
• Design and conduct information security risk assessments, documenting findings, evaluating potential impacts and developing appropriate mitigation plans.
• Maintain an up-to-date inventory of security controls and supporting evidence to ensure readiness for internal and external audits.
• Identify opportunities to automate governance, risk management, documentation and evidence-collection processes for certifications and compliance assessments.
• Manage the complete lifecycle of audit findings and observations, ensuring corrective actions are implemented effectively and within established deadlines.
• Develop, monitor and maintain compliance KPIs and KRIs to measure the maturity, performance and effectiveness of security controls.
• Design and deliver organisation-wide security awareness and compliance training programmes to strengthen the internal security culture.
• Assess risks associated with internal and critical third-party vendors, ensuring compliance with contractual security requirements and established standards.
• Act as a key point of coordination between technical teams, audit stakeholders and senior management to support effective governance and risk oversight.

Connaissances

ISO 27001

SOC 2

NIST CSF

PCI DSS

Data protection

Risk management

Audit readiness

Regulatory compliance

Stakeholder management

KPIs/KRIs

Formation

Bachelor's degree

Description du poste

Jobgether is seeking a Senior Security Analyst - GRC to strengthen information security governance, risk management and regulatory compliance in a growing fintech environment in Mexico. You will drive policies, controls and compliance programs to protect critical operations and sensitive information.

You will collaborate with technical teams, auditors and leadership to align security practices with ISO 27001, PCI DSS, SOC 2, NIST and GDPR, and advance automation, monitoring and risk oversight