Vulnerability Risk & Compliance Manager

W3Global; México; Híbrido; MXN 500.000 - 900.000; Jornada completa

Descripción de la vacante

W3Global in Mexico is seeking an experienced cybersecurity professional to lead vulnerability management and compliance monitoring within a client-focused delivery environment. The role involves analyzing vulnerabilities from multiple sources across cloud, networks, and applications, and communicating risk to business teams.

The ideal candidate has a total of 7 to 10 years in IT with at least 5 years in vulnerability management, plus certifications such as CISM, CISSP, CISA or ISO 27001.

Formación

• Total of 7 to 10 years in IT technical role with at least 5 years' experience in vulnerability management and compliance monitoring.
• Demonstrated experience in cybersecurity vulnerability management and analysis.
• Knowledge of IT control monitoring for regulatory and compliance requirements like (SOX, PCI DSS, DPA, HIPAA, NERC CIP), Standards (ISO 27001, BS 17799) and frameworks (ITIL, NIST, COBIT).
• Holds experience in delivering Risk and Compliance management services for a client based delivery environment.

Responsabilidades

• Analyze the vulnerabilities' data from multiple sources across technologies to determine risk factors.
• Perform recurring and on-demand scanning activities in enterprise environments.
• Communicate risks to the business and recommend cost-effective security controls to mitigate risks.
• Provide analysis of vulnerabilities to team members to assist remediation efforts.
• Provide post-remediation analysis and identify opportunities for improvements.
• Ensure scan results are presented in dashboards and reports and forwarded to data systems.
• Recommend approaches for addressing vulnerabilities including patching, controls, code or infrastructure changes, and dev process changes.
• Execute the vulnerability lifecycle management strategy across the organization.
• Interface with third-party vendors to improve the vulnerability management process.
• Monitor security news to proactively identify vulnerabilities that may impact the organization.
• Continue self-development to better support Cybersecurity capabilities.

Conocimientos

Vulnerability management

Compliance monitoring

Cybersecurity

Cloud computing

Networking

Systems administration

Automation

Information security

Herramientas

CISM

CISSP

CISA

ISO27001

CCNA

CCNP

CCSA

Descripción del empleo

W3Global in Mexico is seeking an experienced cybersecurity professional to lead vulnerability management and compliance monitoring within a client-focused delivery environment. The role involves analyzing vulnerabilities from multiple sources across cloud, networks, and applications, and communicating risk to business teams.

The ideal candidate has a total of 7 to 10 years in IT with at least 5 years in vulnerability management, plus certifications such as CISM, CISSP, CISA or ISO 27001.