Core Responsibilities

The role involves managing security risks by designing and maintaining the Risk Framework aligned with ISO standards, conducting periodic risk assessments, and monitoring KRIs for executive reporting. Additionally, the position is responsible for ensuring regulatory compliance across standards like ISO 27001, NIST CSF, PCI-DSS, and GDPR, while leading the risk and compliance team.

Requirements

Candidates must possess a minimum of 6 years of experience in information security, risk management, or compliance, including at least 2 years leading teams or projects. Proven experience in implementing ISO 27001 SGSI, managing security audits (ISO, SOC 2, PCI-DSS), designing Risk Frameworks, and experience with TPRM and GRC tools like ServiceNow GRC or RSA Archer is required.

Additional Information

Experience Level

5-10

Job Language

Spanish

Work Mode

Remote