Cybersecurity Professional

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Perform cybersecurity risk assessments for technological, business, and operational initiatives.

• Evaluate threats, vulnerabilities, and the effectiveness of controls to ascertain residual risk.

• Keep cybersecurity risk registers up to date and well-maintained.

• Assess risks in relation to the established risk appetite and tolerance levels.

• Monitor and document risk mitigation and remediation efforts until completion.

• Contribute to the Cybersecurity Risk and Control Framework (CRCF).

• Challenge the thoroughness and precision of risk assessments and mitigation strategies.

• Oversee compliance with cybersecurity policies, standards, and control requirements.

• Assist in the reviews of exceptions and risk acceptances.

• Aid in the governance forums and reporting activities related to cybersecurity.

• Support both internal and external cybersecurity audits.

• Manage the collection of evidence and track remediation efforts.

• Evaluate compliance with internal cybersecurity standards and relevant regulations.

• Assist with control assessments and identify gaps.

• Create risk metrics, dashboards, and management reports.

• Prepare documentation for management and governance reviews.

• Highlight significant cybersecurity risk exposures and emerging trends.

• Assist with enterprise-level cybersecurity reporting activities.

• Work collaboratively with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.

• Provide direction on processes and requirements for cybersecurity risk management.

• Lead risk reviews and discussions on risk treatment with stakeholders.

• Foster awareness of cybersecurity and promote risk-informed decision-making.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Risk Management, or a related field.

• Over 10 years of experience in cybersecurity, risk management, auditing, compliance, or information security.

• Familiarity with methodologies and control frameworks for cybersecurity risk management.

• Capable of analyzing complex technical and business-related risks.

• Excellent written, presentation, and communication skills.

• Knowledge of prevalent cybersecurity frameworks and regulations (e.g., NIST, ISO 27001, GDPR).

• Strong analytical and problem-solving abilities.

• Relevant certifications such as CompTIA Security+ or CISSP are advantageous.

🏝️ Benefits

• Comprehensive benefits, support, and services that promote overall health and wellbeing.

• Flexible working arrangements tailored to your needs (dependent on role and location).

• A culture of autonomy, freedom, and ownership.

• An inclusive environment built on mutual respect and merit-based principles.

• Reasonable accommodations available during the recruitment process.