Want to know if this job is worth applying to?
Ciudad de México, México
Hybrid
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Analyst – GRC based in Mexico.
As a Senior Security Analyst – GRC, you will play a key role in strengthening information security governance, risk management and regulatory compliance within a fast-growing fintech environment.
You will lead the development, implementation and continuous improvement of security policies, controls and compliance processes, helping protect critical business operations and sensitive information.
Working closely with technical teams, auditors and senior leadership, you will ensure that security practices align with industry standards and regulatory requirements.
You will contribute to identifying and mitigating internal and third-party risks while maintaining strong audit readiness and effective control frameworks.
The role also offers opportunities to improve governance processes through automation, data-driven monitoring and innovative security solutions.
You will join a dynamic, collaborative technology environment where your expertise will directly support business resilience, customer trust and the responsible growth of financial services across Mexico.
Develop, implement and maintain information security policies, standards and procedures in alignment with organisational requirements and industry best practices.
Monitor and assess applicable regulatory and compliance requirements, including ISO 27001, PCI DSS, SOC 2, CNBV and other relevant frameworks.
Design and conduct information security risk assessments, documenting findings, evaluating potential impacts and developing appropriate mitigation plans.
Maintain an up-to-date inventory of security controls and supporting evidence to ensure readiness for internal and external audits.
Identify opportunities to automate governance, risk management, documentation and evidence-collection processes for certifications and compliance assessments.
Manage the complete lifecycle of audit findings and observations, ensuring corrective actions are implemented effectively and within established deadlines.
Develop, monitor and maintain compliance KPIs and KRIs to measure the maturity, performance and effectiveness of security controls.
Design and deliver organisation-wide security awareness and compliance training programmes to strengthen the internal security culture.
Assess risks associated with internal and critical third-party vendors, ensuring compliance with contractual security requirements and established standards.
Act as a key point of coordination between technical teams, audit stakeholders and senior management to support effective governance and risk oversight.
Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
At least 5 years of professional experience in software engineering, information security, security governance, risk management or regulatory compliance.
Strong knowledge of information security and governance frameworks, including ISO 27001/27002, SOC 2, NIST Cybersecurity Framework, PCI DSS, CIS Controls and GDPR.
Proven experience in internal and third-party risk management, data protection, security policies, control implementation and compliance monitoring.
Practical experience with audit preparation, evidence collection, control assessments and remediation management.
Understanding of applicable regulatory requirements and information security standards within the financial services or fintech sector.
Experience automating governance, risk management, compliance documentation and audit evidence-collection processes.
Ability to define and monitor KPIs and KRIs, analyse security performance and communicate risk-related insights to stakeholders.
Strong analytical, problem-solving and organisational skills, with excellent attention to detail.
Effective communication and stakeholder management skills, including the ability to translate complex technical and regulatory requirements into clear business recommendations.
Proactive, collaborative and adaptable approach, with the ability to work independently and manage multiple priorities.
Competitive compensation package and attractive employee benefits.
Hybrid working arrangement for professionals based in Mexico City (CDMX) and the State of Mexico.
Fully remote working opportunities for candidates based elsewhere in Mexico and across Latin America.
Dynamic and collaborative working environment that encourages professional development and knowledge sharing.
Opportunities to learn, grow and work with cutting-edge technologies and innovative security solutions.
Collaboration with a talented and passionate team of technology and security professionals.
Opportunity to make a meaningful impact on the financial well-being of thousands of customers and contribute to economic development in Mexico.
Full-time employment opportunity within a growing fintech environment.
