Senior Cybersecurity & Risk Leader

BMA Group Global; Guaynabo (PR); On-site; USD 120,000 - 190,000; Full time

Job summary

BMA Group Global is seeking a Cybersecurity & IT Risk Manager to define and oversee the organization’s information security strategy, policies, and controls. You will safeguard digital assets, ensure regulatory compliance, and strengthen resilience against threats.

You will lead governance, incident response, audits, and cross‑functional collaboration with IT, Legal, Compliance, and Audit to align security with business goals.

Qualifications

• Minimum of 5 years of experience in information security or cybersecurity leadership roles.
• Experience in risk management, regulatory compliance, incident response, and cybersecurity project management.
• Proven experience leading teams and coordinating cross-functional initiatives.

Responsibilities

• Develop and maintain the organization’s information security strategy aligned with business objectives and regulatory requirements.
• Design, implement, and oversee cybersecurity policies, procedures, and controls based on recognized standards such as NIST CSF, ISO 27001, PCI DSS, HIPAA, SOX, GLBA, and CIS Controls.
• Lead cybersecurity incident response activities and crisis management efforts.
• Coordinate communications and response actions with key stakeholders during security incidents.
• Coordinate and oversee internal and external security audits, remediation tracking, and corrective action plans.
• Collaborate with IT, Legal, Compliance, Audit, and Operations to strengthen governance and risk management practices.

Skills

Regulatory compliance

Risk management

Incident response

Cybersecurity leadership

Cross-functional coordination

Analytical skills

Strategic planning

Education

Bachelor’s degree in Information Systems, Engineering, Computer Science, or related field

Job description

BMA Group Global is seeking a Cybersecurity & IT Risk Manager to define and oversee the organization’s information security strategy, policies, and controls. You will safeguard digital assets, ensure regulatory compliance, and strengthen resilience against threats.

You will lead governance, incident response, audits, and cross‑functional collaboration with IT, Legal, Compliance, and Audit to align security with business goals.