Security Governance Consultant

Accountabilities

• Support the development and operation of security governance programs, processes, and procedures designed to mitigate Identity and Access Management (IAM) risks and protect organizational information and assets.
• Conduct periodic User Access Review campaigns to verify that employee access to systems and data remains necessary, appropriate, and aligned with security requirements.
• Research relevant cybersecurity regulations, contractual requirements, industry standards, and government requirements to support governance activities.
• Prepare, organize, and maintain documentation, filings, evidence, and other materials required for regulatory, contractual, and cybersecurity governance purposes.
• Support ongoing audits of governance processes and procedures by collecting information, documenting findings, organizing results, and maintaining appropriate audit evidence.
• Contribute to the development, communication, and execution of security governance programs and processes that align with operational and business needs.
• Develop an understanding of assigned business areas and their technical requirements to help ensure that governance activities are practical and appropriately aligned with operational priorities.
• Collaborate with peers and stakeholders across business and technical teams to communicate governance requirements and support effective implementation.
• Identify opportunities to improve governance processes, documentation, and controls while escalating issues or risks when appropriate.
• Build knowledge of relevant cybersecurity governance practices, regulations, and organizational requirements to support increasingly complex responsibilities over time.

Requirements:

• You have a Bachelor’s degree, preferably in cybersecurity, information technology, computer science, business, risk management, or a related field.
• You have approximately 2 or more years of relevant professional experience, ideally in cybersecurity, IT governance, risk, compliance, identity and access management, or a related discipline.
• You have an interest in cybersecurity governance and are motivated to develop expertise in security controls, IAM, regulatory requirements, and risk management.
• You have strong organizational skills and can manage documentation, evidence, review activities, and multiple governance tasks accurately and consistently.
• You demonstrate strong attention to detail, particularly when reviewing user access, compliance evidence, documentation, and audit results.
• You have strong research and analytical skills and can interpret regulatory, contractual, industry, and government requirements.
• You communicate clearly and professionally, with the ability to work effectively with peers and stakeholders across business and technical environments.
• You are comfortable documenting findings, preparing materials, maintaining records, and communicating information to both operational and governance audiences.
• You can understand business and technical requirements and translate them into practical governance activities and processes.
• You are proactive, dependable, and willing to learn new cybersecurity governance concepts, regulations, and technologies.
• You can work independently on assigned activities while collaborating effectively with more senior governance professionals and cross-functional teams.
• An equivalent combination of education and relevant professional experience may be considered.

Benefits:

• Fully remote position based in Mexico.
• Full-time opportunity within a cybersecurity governance and risk environment.
• Opportunity to develop expertise in Identity and Access Management, cybersecurity governance, compliance, and audit processes.
• Exposure to regulatory, contractual, and industry cybersecurity requirements.
• Opportunity to contribute to meaningful security initiatives that protect information, systems, and organizational assets.
• Collaborative environment with opportunities to work alongside business, technical, and governance stakeholders.
• Professional development through hands-on experience with governance programs, access reviews, audits, and compliance activities.
• Opportunity to strengthen analytical, research, documentation, communication, and stakeholder-management skills.
• Role offering increasing exposure to security governance strategy, processes, and operational requirements.
• Supportive environment focused on continuous learning, challenging existing practices, and developing cybersecurity capabilities.