Global Cybersecurity Manager - ISO 27001 & Risk Lead

CIMMYT; Mexico; On-site; MXN 900,000 - 1,300,000; Full time

Benefits offered by this job

Year-end bonus (40 days)

Vacation premium (56%)

Life and medical insurance

Supermarket coupons

Savings fund

IMSS/SAR Infonavit benefits

Job summary

CIMMYT seeks an experienced Cybersecurity Manager to lead the protection of its global information assets and oversee the Information Security Management System aligned to ISO/IEC 27001:2022. The role includes owning security platforms, incident response, vulnerability management, and coordinating across country offices.

You will drive risk assessments, manage vendor relationships, and support internal and donor audits in a multinational, non-profit research environment.

Qualifications

• 8+ years of information security experience.
• 3+ years managing or supervising a technical team.
• CISSP, CISM, ISO/IEC 27001 Lead Implementer/Auditor or equivalent.
• Experience implementing ISO/IEC 27001 with Annex A mapping and audit evidence.
• Experience managing security vendors, contracts, licences and budgets.
• Experience in multi-country or distributed organizations is a plus.

Responsibilities

• Lead the information security function and mentor the team.
• Operate ISO/IEC 27001:2022 ISMS and maintain standards and evidence.
• Prepare and present risk, control items and follow through on actions.
• Deploy and troubleshoot security platforms, EDR, IAM, vulnerability management, encryption, SIEM and network security.
• Own vulnerability, patch management and incident response end-to-end.
• Coordinate with regional IT specialists and support security awareness organization-wide.
• Report monthly on security posture and control performance.

Skills

Information security

Leadership

Risk assessment

Incident response

Vulnerability management

Education

Bachelor’s degree in Computer Science

Master’s degree (advantage)

Job description

CIMMYT seeks an experienced Cybersecurity Manager to lead the protection of its global information assets and oversee the Information Security Management System aligned to ISO/IEC 27001:2022. The role includes owning security platforms, incident response, vulnerability management, and coordinating across country offices.

You will drive risk assessments, manage vendor relationships, and support internal and donor audits in a multinational, non-profit research environment.