Senior Analyst, Information Technology Security

In this fully remote position, you will play a key role in developing and strengthening a global cybersecurity Governance, Risk & Compliance (GRC) program. Working closely with executive leadership, including the Chief Information Security Officer (CISO), you will help shape cybersecurity governance strategies, enhance IT risk management practices, and ensure compliance with industry standards and customer requirements. You will contribute to the development of security policies, frameworks, and internal controls while supporting risk assessments and audit readiness. The role also involves translating complex security information into meaningful metrics and executive-level reports. You will collaborate with cross-functional teams across an international manufacturing environment, helping strengthen the organization's security posture and resilience. This is an opportunity to make a tangible impact on cybersecurity strategy and governance in a global, remote-first setting.

• Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures.

• Manage customer and third-party security requirements, ensuring compliance with contractual obligations and relevant security standards.

• Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

• Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization.

• Support internal and external audits, compliance reviews, and the continuous improvement of security controls.

• Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities.

• Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes.

• Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap.

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.

• At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field.

• Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.

• Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.

• Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls.

• Excellent communication skills in both English and Spanish, with the ability to present technical and risk-related information to different audiences.

• Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment.

• Analytical mindset, attention to detail, and the ability to manage multiple priorities independently.

• Preferred qualifications:

  • Professional certifications such as CISA, CISM, or CRISC.

  • Previous experience in the manufacturing or industrial sector.

  • Knowledge of privacy regulations, data protection principles, and related compliance requirements.