Security Consultant – vCISO

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Act as the main security advisor for client organizations.

• Design and implement comprehensive enterprise security strategies, roadmaps, and governance frameworks.

• Convert technical risks into business and financial implications for executive and board-level stakeholders.

• Oversee incident response planning, conduct tabletop exercises, and manage breach investigations.

• Perform risk assessments and maturity evaluations in accordance with NIST, CIS, ISO, and other relevant frameworks.

• Develop and enhance security programs, policies, and compliance initiatives.

• Create and oversee vendor risk and third-party risk management programs.

• Provide executive-level reporting on security posture, risk trends, and program advancements.

• Collaborate with IT, architecture, and business leaders to integrate security into everyday operations.

• Facilitate client growth and service expansion through strategic executive conversations and advisory roles.

• Remain proactive regarding emerging threats, technologies, and regulatory changes.

• Cultivate relationships with clients and internal teams, evaluate security posture, identify risks, and implement prioritized security roadmaps.

• Set up a regular executive reporting schedule and enhance security maturity and risk mitigation.

• Strengthen and expand key enterprise client relationships, possibly managing multiple client engagements.

• Contribute to the development of DYOPATH’s security advisory practice.

⛳️ Requirements

• Bachelor’s degree in computer science, Information Technology, or a related discipline.

• Over 10 years of progressive experience in cybersecurity or IT.

• Minimum of 5 years in a leadership or executive security position.

• Demonstrated experience in leading security programs or providing counsel to senior leadership.

• Proficient in advanced English, with a professional command required.

• Extensive knowledge in risk management, compliance, and security frameworks.

• Strong capability to translate technical risks into business results.

• Proven track record of influencing executive and board-level stakeholders.

• Experience in developing long-term security roadmaps.

• Excellent problem-solving, prioritization, and decision-making abilities.

• Capability to juggle multiple priorities and client demands effectively.

• Preferred senior-level certifications include CISSP, CISM, CISA, or equivalent.

🏝️ Benefits

• Aguinaldo (25 days – exceeding legal requirements).

• Vacation + 25% premium.

• IMSS + Major medical insurance (includes family coverage).

• Monthly savings fund + pantry vouchers.

• Opportunities for quarterly performance bonuses.

• Paid leave for life events (parental, marriage, bereavement).

• Pet insurance.

• Performance-based bonuses.