Overview:
**Recruiter -** Lorena Padilla
**Position reports to**: Quetzalcoatl Contreras
**Work schedule**: Hybrid, going to the office in GDL for 3 days.
THE ROLE:
HOW YOU WOULD CONTRIBUTE:
- Identify and suggest implement security controls to protect the organization's systems and data.
- Leverage company resources to make strong proposals regarding new security hardening standards for technology components to meet Herbalife security requirements.
- Conduct regular security reviews on Herbalife platforms and build the dashboard/metric for management review.
- Leverage well-known security standards and best practices to provide guide for creating Herbalife security policies, standards, procedures, and guidelines.
- Identify and maintain up to date the security controls baseline.
- Participating in the technology life cycle to identify and mitigate cybersecurity risk and establishing compensating controls if needed.
- Monitoring, detecting, and reporting cybersecurity risk and policy deviation and provide recommendation to the risk management team.
- Provide technical support, delegation, and technical training to the cybersecurity team to achieve strategic goals.
- Analyze systems, threat modeling for new features, identify security vulnerabilities in implementation, and recommend cloud security controls to ensure end-to-end protection.
- Support Cybersecurity general projects and delivery to all the regions.
WHAT’S SPECIAL ABOUT THE TEAM:




The team support the design of secure solutions for business requirements in alignment with Herbalife’s technology roadmap. This is a global team with members in multiple countries.
SUPERVISORY RESPONSIBILITIES: N/A.
Job Qualifications:
SKILLS AND BACKGROUND REQUIRED TO BE SUCCESSFUL:
- 6+ years of cloud or IT experience or equivalent or 6+ years of experience in designing or evaluating Enterprise architecture, or 6+ years of experience in a Cybersecurity role.
- Familiarity with Enterprise Technologies, Enterprise Applications, and Enterprise Architectures.
- General knowledge of Networking, Operating Systems, Databases, Application Development, Containers, Cloud technologies.
- General experience working with technologies and stacks: build pipelines, frameworks, QA process, etc.
EDUCATION:
- Bachelor's degree in computer science or related field.
- Experience in public cloud (Azure, GCP, AWS and other public clouds).
- Experience assessing and mitigating risks related to public cloud deployment (Azure, GCP and other public clouds.
- Familiarity with Cloud technologies: SaaS, IaaS, PaaS, others.
- At least two out of the following Technical Certifications:
- ISC2 CISSP - Mandatory.
- Microsoft Certified: Azure Security Engineer Associate (AZ-500).
- AWS Certified Security Specialty.
- Google Professional Cloud Security Engineer Certification.

📌 Principal I, Cloud Cybersecurity (San Pedro Tlaquepaque)
🏢 Herbalife
📍 San Pedro Tlaquepaque