Senior Analyst, Information Technology Security

Accountabilities: Lead the development, implementation, and ongoing governance of cybersecurity and IT policies, standards, and procedures. Manage customer and third-party security requirements, ensuring compliance with contractual obligations and relevant security standards. Drive cybersecurity control assurance and maturity assessments using recognized frameworks such as NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls. Coordinate IT and cybersecurity risk management activities, including risk identification, assessment, mitigation, and monitoring across the organization. Support internal and external audits, compliance reviews, and the continuous improvement of security controls. Develop and maintain cybersecurity metrics, dashboards, and executive-level reports to communicate risk exposure, program performance, and improvement priorities. Partner with cross-functional stakeholders across Legal, Human Resources, Finance, Operations, Supply Chain, and Commercial teams to embed security governance into business processes. Work closely with the CISO and global cybersecurity leadership to establish and mature the organization's GRC strategy and roadmap. Requirements: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline. At least 5 years of professional experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a closely related field. Proven experience developing and managing cybersecurity policies, security controls, audit processes, and IT risk management initiatives. Strong knowledge of cybersecurity governance principles, risk assessment methodologies, compliance requirements, and control frameworks. Practical familiarity with recognized cybersecurity frameworks, particularly NIST CSF 2.0 and CIS Controls. Excellent communication skills in both English and Spanish, with the ability to present technical and risk-related information to different audiences. Strong stakeholder management and influencing skills, with the ability to drive initiatives across multidisciplinary teams in a global, remote environment. Analytical mindset, attention to detail, and the ability to manage multiple priorities independently. Preferred qualifications: Professional certifications such as CISA, CISM, or CRISC. Previous experience in the manufacturing or industrial sector. Knowledge of privacy regulations, data protection principles, and related compliance requirements. Benefits: Competitive compensation package. Health and dental insurance. 401(k) retirement savings plan with employer matching contributions. Paid vacation and time off. Fully remote working arrangement within Mexico. Opportunity to work closely with executive cybersecurity leadership and contribute to the development of a global GRC program. International and cross-functional exposure within a global manufacturing environment. Occasional business travel, with an expected travel commitment of up to 10%. Full-time employment opportunity.