Senior Analyst, Information Technology Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Analyst, Information Technology Security based in Mexico.

In this fully remote position, you will play a key role in developing and strengthening a global cybersecurity Governance, Risk & Compliance (GRC) program.

Working closely with executive leadership, including the Chief Information Security Officer (CISO), you will help shape cybersecurity governance strategies, enhance IT risk management practices, and ensure compliance with industry standards and customer requirements. You will contribute to the development of security policies, frameworks, and internal controls while supporting risk assessments and audit readiness.

The role also involves translating complex security information into meaningful metrics and executive-level reports. You will collaborate with cross-functional teams across an international manufacturing environment, helping strengthen the organization's security posture and resilience. This is an opportunity to make a tangible impact on cybersecurity strategy and governance in a global, remote-first setting.

Accountabilities

Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures.

Manage customer and third-party security requirements, ensuring compliance with contractual obligations and relevant security standards.

Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization.

Support internal and external audits, compliance reviews, and the continuous improvement of security controls.

Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities.

Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes.

Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.

At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field.

Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives.

Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks.

Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls.

Excellent communication skills in both English and Spanish, with the ability to present technical and risk-related information to different audiences.

Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment.

Analytical mindset, attention to detail, and the ability to manage multiple priorities independently.

Preferred qualifications

Professional certifications such as CISA, CISM, or CRISC.

Previous experience in the manufacturing or industrial sector.

Knowledge of privacy regulations, data protection principles, and related compliance requirements.

Benefits

Competitive compensation package.

Health and dental insurance.

401(k) retirement savings plan with employer matching contributions.

Paid vacation and time off.

Fully remote working arrangement within Mexico.

Opportunity to work closely with executive cybersecurity leadership and contribute to the development of a global GRC program.

International and cross-functional exposure within a global manufacturing environment.

Occasional business travel, with an expected travel commitment of up to 10%.

Full-time employment opportunity.

How Jobgether works

• We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
• We appreciate your interest and wish you the best!
• Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1