Senior Security Risk & Compliance Analyst

Jobtailor; Ciudad de México; Presencial; MXN 420.000 - 640.000; Jornada completa

Descripción de la vacante

Jobtailor seeks a Security Reviews and IT Risk Assessments professional to evaluate security postures, review reports from SOC, pentest, and vulnerability teams, and identify gaps across projects and vendors. You’ll communicate findings to both technical and business stakeholders and document risks for audits.

The role emphasizes strong analytical skills, knowledge of OWASP Top 10, NIST/ISO/PCI-HIPAA frameworks, and the ability to operate within a Mexico-based team and environment.

Formación

• Approximately 3–5 years of experience performing Security Reviews, IT Risk Assessments, IT Audits, Risk Audits, or similar activities.
• Experience reviewing and interpreting SOC, Penetration Testing, and Vulnerability Management reports.
• Broad understanding of application security, security architecture, secure coding concepts, access control, data protection, cryptography, monitoring, and vulnerability management.
• Understanding of security principles, IT security controls, and related technologies and products.
• Knowledge of the OWASP Top 10 web application security risks.
• Familiarity with NIST 800 series, ISO 27000, PCI-DSS, and HIPAA.
• Familiarity with Active Directory, LDAP, Okta or other access management solutions, IDS, firewalls, load balancers, proxies, DLP, Qualys, Carbon Black, Symantec CCS, or comparable technologies.
• Strong analytical, troubleshooting, organizational, and documentation skills.
• Ability to prioritize and manage multiple projects or assessments simultaneously.
• Strong written and verbal communication skills and ability to collaborate with stakeholders at different organizational levels.
• Advanced English; comfortable conducting business and technical conversations with technical and administrative stakeholders, including U.S.-based teams.
• Candidates must currently reside in Mexico.
• Preferred: experience with GRC platforms such as Archer; certifications such as CISSP, CCSP, CISA, CCSK, or similar; third-party or vendor security risk experience; U.S.-based or multicultural team experience; ability to translate technical findings into risk, control, and business implications; audit-exposed assessment experience.

Responsabilidades

• Perform Security Reviews, IT Risk Assessments, IT Audits, and related security evaluation activities for projects, vendors, applications, and technology environments.
• Evaluate security posture against established standards, policies, methodologies, control objectives, and security best practices.
• Review and interpret technical documentation and reports from Penetration Testing, Security Operations Centers, and Vulnerability Management teams.
• Identify security and control gaps and evaluate their impact within broader risk assessments.
• Assess application security, architecture, access control, cryptography, data protection, monitoring, vulnerabilities, and secure development practices.
• Review projects and vendors against information security and regulatory requirements.
• Work with technical and business stakeholders to clarify findings, collect evidence, and communicate security requirements.
• Document assessments, findings, risks, and recommendations clearly and accurately.
• Escalate issues when appropriate and maintain documentation suitable for internal or external audit review.
• Manage multiple concurrent assessments and priorities.
• Stay current with evolving information security requirements, threats, technologies, controls, and practices.

Conocimientos

Security Reviews

IT Risk Assessments

IT Audits

Application Security

Vulnerability Management

Written Communication

Verbal Communication

Collaboration

Analytical Skills

Troubleshooting

Educación

CISSP

CCSP

CISA

CCSK

Herramientas

Active Directory

LDAP

Okta

Qualys

Carbon Black

Symantec CCS

IDS

Firewalls

Load Balancers

Proxies

Descripción del empleo

Jobtailor seeks a Security Reviews and IT Risk Assessments professional to evaluate security postures, review reports from SOC, pentest, and vulnerability teams, and identify gaps across projects and vendors. You’ll communicate findings to both technical and business stakeholders and document risks for audits.

The role emphasizes strong analytical skills, knowledge of OWASP Top 10, NIST/ISO/PCI-HIPAA frameworks, and the ability to operate within a Mexico-based team and environment.