**Join our team and help shape Benchmark's general cybersecurity future!
**
We are seeking a **Cyber Security Compliance Lead**responsible for strengthening the organization's Cybersecurity Integrated Risk Management & Compliance program.
This role ensures adherence to regulatory, contractual, and internal security requirements by conducting control assessments, supporting audits, coordinating remediation activities, and maintaining proper documentation.
The position collaborates closely with IT, Legal, Security Engineering, and business teams to sustain a strong security posture.
**On-site: Guadalajara**
**Key Responsibilities**:
**1.
Cybersecurity Compliance &Control; Assessments**
- Perform internal security control assessments validating adherence to internal cyber security/IT policies while meeting external frameworks requirements: NIST SP *******, CMMC, ISO, SOX &others;
- Partner with CORP Internal audit to drive awareness on SOX IT controls &ensure; remediation plan closures on time
- Assist in maintaining evidence repositories for audits, including SSP updates, POA&Ms;, and continuous monitoring artifacts
- Support governance activities aligned with NIST CSF functions (Govern, Identify, Protect, Detect, Respond, Recover)
**2.
Regulatory &Customer; Contractual Requirements Adherence**
- Support responses to customer cyber/compliance inquiries and security questionnaires.
- Lead external certification assessments &establish; plan of action (POAM )(eg: CMMC)
- Gather audit evidence for government, customer, and third‐party cyber assessments.
- Track remediation of identified compliance gaps and ensure timely closure.




- Ensure policies have proper traceability to operational controls and support "Be-Audit-ready" documentation.
**3.
Continuous Controls Monitoring &Reporting;**
- Establish mechanism to monitor &report; security control effectiveness and coordinate with technical teams to track remediation actions.
- Partner with Cyber governance lead to establish &manage; policy compliance metric.
- Support ongoing risk assessments, vulnerability reviews, and asset classification activities.
- Assist in conducting supplier or third‐party cybersecurity assessments when required.
**4.
Policy, Standards &Procedures; Support**
Assist cyber governance team in reviewing, updating, and maintaining cybersecurity policies, standards, and procedures.
**Requirements**:
- Bachelor's degree in Cybersecurity, IT, Information Systems, IT Audit, or a related field.
- **5+ years of experience**in cybersecurity, IT audit, GRC, or compliance-related roles.
- Knowledge of frameworks such as **NIST CSF, NIST SP *******, CMMC, ISO *****, and SOX**.
- Ability to perform control testing, document evidence clearly, and collaborate with cross-functional teams.Excellent communication and documentation skills.
**Skills & Competencies**:
- Strong understanding of cyber governance, risk methodologies, and regulatory obligations.
- Excellent communication skills, capable of translating technical risk for executive audiences.
- Strong program and portfolio management capabilities.
- Proven cross‐functional leadership and stakeholder management.Familiarity with CMMC, ITAR, SOX, and global regulatory compliance.
**Preferred Certifications**:
- **CISA, CDPSE, CRISC, CISSP, or CISM**:
- SOX IT or Cyber Internal Auditor
- CMMC Professional/Assessor (preferred)

📌 Cyber Security Compliance Lead (Tlajomulco de Zúñiga)
🏢 Benchmark Electronics
📍 Tlajomulco de Zúñiga