Senior Analyst, Information Technology Security

Accountabilities

• Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures.

• Manage customer and third-party security requirements, ensuring compliance with contractual obligations and relevant security standards.

• Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

• Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization.

• Support internal and external audits, compliance reviews, and the continuous improvement of security controls.

• Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities.

• Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes.

• Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap.

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.

• At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field.

• Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.

• Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.

• Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls.

• Excellent communication skills in both English and Spanish, with the ability to present technical and risk-related information to different audiences.

• Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment.

• Analytical mindset, attention to detail, and the ability to manage multiple priorities independently.

• Preferred qualifications:

  • Professional certifications such as CISA, CISM, or CRISC.

  • Previous experience in the manufacturing or industrial sector.

  • Knowledge of privacy regulations, data protection principles, and related compliance requirements.

  Benefits:

  • Competitive compensation package.

  • Health and dental insurance.

  • 401(k) retirement savings plan with employer matching contributions.

  • Paid vacation and time off.

  • Fully remote working arrangement within Mexico.

  • Opportunity to work closely with executive cybersecurity leadership and contribute to the development of a global GRC program.

  • International and cross-functional exposure within a global manufacturing environment.

  • Occasional business travel, with an expected travel commitment of up to 10%.

  • Full-time employment opportunity.