Security Analyst Sr. - GRC

MexicoRemoteFull-timesenior

Security AnalystCybersecurity

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Analyst – GRC based in Mexico.

Technical Tools

Security AnalystCybersecurity

As a Senior Security Analyst – GRC, you will play a key role in strengthening information security governance, risk management and regulatory compliance within a fast-growing fintech environment.
You will lead the development, implementation and continuous improvement of security policies, controls and compliance processes, helping protect critical business operations and sensitive information.
Working closely with technical teams, auditors and senior leadership, you will ensure that security practices align with industry standards and regulatory requirements.
You will contribute to identifying and mitigating internal and third-party risks while maintaining strong audit readiness and effective control frameworks.
The role also offers opportunities to improve governance processes through automation, data-driven monitoring and innovative security solutions.
You will join a dynamic, collaborative technology environment where your expertise will directly support business resilience, customer trust and the responsible growth of financial services across Mexico.

Develop, implement and maintain information security policies, standards and procedures in alignment with organisational requirements and industry best practices.
Monitor and assess applicable regulatory and compliance requirements, including ISO 27001, PCI DSS, SOC 2, CNBV and other relevant frameworks.
Design and conduct information security risk assessments, documenting findings, evaluating potential impacts and developing appropriate mitigation plans.
Maintain an up-to-date inventory of security controls and supporting evidence to ensure readiness for internal and external audits.
Identify opportunities to automate governance, risk management, documentation and evidence-collection processes for certifications and compliance assessments.
Manage the complete lifecycle of audit findings and observations, ensuring corrective actions are implemented effectively and within established deadlines.
Develop, monitor and maintain compliance KPIs and KRIs to measure the maturity, performance and effectiveness of security controls.
Design and deliver organisation-wide security awareness and compliance training programmes to strengthen the internal security culture.
Assess risks associated with internal and critical third-party vendors, ensuring compliance with contractual security requirements and established standards.
Act as a key point of coordination between technical teams, audit stakeholders and senior management to support effective governance and risk oversight.

Requirements

~1 min read

Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
At least 5 years of professional experience in software engineering, information security, security governance, risk management or regulatory compliance.
Strong knowledge of information security and governance frameworks, including ISO 27001/27002, SOC 2, NIST Cybersecurity Framework, PCI DSS, CIS Controls and GDPR.
Proven experience in internal and third-party risk management, data protection, security policies, control implementation and compliance monitoring.
Practical experience with audit preparation, evidence collection, control assessments and remediation management.
Understanding of applicable regulatory requirements and information security standards within the financial services or fintech sector.
Experience automating governance, risk management, compliance documentation and audit evidence-collection processes.
Ability to define and monitor KPIs and KRIs, analyse security performance and communicate risk-related insights to stakeholders.
Strong analytical, problem-solving and organisational skills, with excellent attention to detail.
Effective communication and stakeholder management skills, including the ability to translate complex technical and regulatory requirements into clear business recommendations.
Proactive, collaborative and adaptable approach, with the ability to work independently and manage multiple priorities.