GRC- Cyber Risk | Remote in Mexico

Important IT company At the Latin American level, growth requires

GRC- Cyber Risk

Key Responsibilities

• Conduct security and risk assessments of applications, software, and technology solutions.

• Identify security gaps, vulnerabilities, control weaknesses, and potential risks within applications and software environments.

• Review application security assessment reports, penetration testing results, vulnerability scans, and other technical security documentation.

• Analyze security findings, evaluate their severity and potential business impact, and document remediation recommendations.

• Track security findings and remediation plans, ensuring appropriate follow-up with application owners, developers, engineering teams, and other stakeholders.

• Review technical evidence to validate security controls and assess whether identified vulnerabilities have been properly addressed.

• Maintain accurate risk registers, assessment documentation, remediation trackers, and audit evidence.

• Coordinate with cybersecurity, IT, application development, infrastructure, and business teams to drive remediation activities.

• Prepare security assessment reports, status updates, and risk summaries for relevant stakeholders.

• Support cybersecurity governance, risk management, and compliance activities aligned with relevant security frameworks and industry best practices.

Required Qualifications

• 3+ years of experience in Cyber Risk, Application Security Assessments, Software Security Assessments, or Vulnerability Management.

• Hands-on experience assessing applications or software from a security and risk perspective.

• Experience identifying security vulnerabilities, application security gaps, and control deficiencies.

• Understanding of vulnerability assessment and penetration testing (VAPT) processes and findings.

• Experience reviewing technical security evidence and assessment reports.

• Experience tracking security findings and coordinating remediation activities through closure.

• Strong documentation, analytical, reporting, and stakeholder management skills.

• Proficiency with Microsoft Excel and SharePoint.

• Experience with ServiceNow or similar risk, issue, or ticket management platforms.

• Advanced English communication skills, both written and verbal.

Preferred Qualifications

• Familiarity with application security testing methodologies and tools such as SAST, DAST, and SCA.

• Knowledge of OWASP Top 10 and common application security vulnerabilities.

• Familiarity with vulnerability management tools and platforms.

• Understanding of secure software development lifecycle (SSDLC) practices.

• Knowledge of security frameworks such as NIST, ISO 27001, CIS, and SOC 2.

• Relevant certifications such as Security+, CEH, GSEC, or equivalent.

Key Competencies

• Strong understanding of application security risks.

• Analytical and problem-solving capabilities.

• Attention to detail and evidence-based risk assessment.

• Ability to communicate technical security findings to technical and non-technical stakeholders.

• Strong follow-up and coordination skills.

• Ability to manage multiple assessments and remediation activities simultaneously.

ADVANCED CONVERSATIONAL ENGLISH AND SPANISH ESSENTIAL (Will be evaluated).

If you are a foreingner residing in Mexico, you must have a valid INE, CURP, NSS and RFC.

Job type : Remote.

Location : Mexico - This position is fully remote; however, candidates must be currently residing in Mexico.

Salary : $55 ,000 MXN gross

Benefits : Excellent superior benefits.