Cybersecurity Risk Analyst
Machine translation — original language: Spanish.Show original
About the company
At Nach Capital Humano, we are looking for a Cybersecurity Risk Analyst with experience in the identification, assessment, and treatment of technological risks. If you are passionate about protecting information, strengthening security controls, and contributing to risk mitigation in corporate environments, this opportunity is for you.
Your tasks
- Identify threats, vulnerabilities, and impacts related to cybersecurity in assigned business units.
- Perform risk analysis and assessment using methodologies and processes established by the organization.
- Follow up on action plans and strategies for cybersecurity risk mitigation.
- Collaborate with technology, audit, fraud prevention, and business areas to manage risks comprehensively.
- Develop management, compliance, and risk indicators to communicate results and progress through control dashboards.
- Perform effectiveness tests on security controls and validate their correct functioning.
- Generate executive reports and risk presentations for decision-making.
- Participate in initiatives oriented toward strengthening security in applications, servers, and databases.
- Contribute to the continuous improvement of risk management and cybersecurity processes.
Requirements
- Bachelor's degree or Engineering in Sistemas Computacionales, Informática, or a related field.
- Minimum of 3 years of experience in information security risks or cybersecurity.
- Experience in analysis, assessment, and treatment of technological risks.
- Knowledge of IT risk management and security methodologies.
- Knowledge of cybersecurity applied to networks, systems, applications, and data protection.
- Experience using GRC (Governance, Risk & Compliance) tools.
- Advanced proficiency in Excel and PowerPoint for analysis and presentation of results.
- Word] Intermediate English (reading, writing, and comprehension of technical documentation).
Desirable
- Experience in PCI DSS compliance.
- Knowledge of the Disposiciones de Carácter General Aplicables a Instituciones de Crédito (Anexo 72).
- Participation in security and compliance audits.
- Certifications related to risk management or information security.
- Experience in the financial sector, banking, or regulated services.
Technical Knowledge
- IT Risk Management
- Cybersecurity Risk Management
- ISO 31000
- NIST SP 800-30
- RISK IT
- GRC Tools
- Application Security
- Network Security
- Infrastructure Security
- Controls Management
- Risk Assessment and Treatment
- Vulnerability Analysis
- Advanced Excel
- Advanced PowerPoint
- Development of Indicators and Dashboards
- Teamwork
- Results orientation
- Collaboration
- Adaptability to change
- Innovation
- Analytical capacity
- Attention to detail
- Risk management
-Requirements-
- Minimum education: Higher education - Bachelor's degree
- 2 years of experience
What we offer
- Statutory benefits
- Benefits above those required by law
Other
Schedule Monday to Friday from 9:00 to 19:00 hrs.
Location Ciudad de México | 100% on-site. ⟦SEC1