About KTSA

We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore .

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

- Experience a collaborative, inclusive, and multicultural workplace where you belong.
- Excel by creating impact and leaving your mark on global projects.
- Expand your potential with real career paths, learning programs, and mentorship.
- Express your individuality — come as you are, and thrive as your authentic self.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS , our total rewards program, designed to support your well-being, goals, and personal milestones.

RESPONSIBILITIES:

- Apply a fundamental understanding of information security to perform information security risk assessments of technology enabled projects against industry standard or firm-specific control frameworks. Activities may include a variety of techniques, including vendor reviews, security requirement definition, and facilitation of security testing and management of residual risk.
- Participate in skills development activities for information security personnel related to security best practices; Continuously improve the security aspects of operating processes.




- Perform cyber security risk assessments of technology enabled projects with standard levels of complexity. Activities include vendor reviews, security requirement definition, facilitation of security testing and management of residual risk.
- Utilize knowledge and understanding of application architecture, design and development and secure coding principles and emerging standards to identify findings and clearly communicate risks and possible remediation
- Advise and assist project teams regarding compensating control alternatives where security requirements cannot be met
- Serve as the primary point of contact between IT project teams and IT Security groups to ensure that appropriate security resources are scheduled, and that security-related project objectives and timelines are met. Review evidence provided to close corrective action plans, ensuring that it meets the control objectives.

QUALIFICATIONS:

- CISSP or CISA preferred
- Understanding of security principles, IT security controls and related technologies and products

Familiarity with:
- NIST 800-53, NIST 800-171, NIST 800-66, CMMC, NIST Framework, ISO, HITRUST, PCI, and/or other relevant control frameworks
- CIA Security Triage
- Risk response options
- SSL TLS
- Encription in transit and encription at rest
- SOC 1, SOC 2,



SOC 3 reports
- Type 1 and Type 2
- NIST 800 series
- 800-53
- OWASP TOP10
- Ability to positively influence, mentor and be a credible source of knowledge to less experienced team members
- Strong verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.

Expand your possibilities with KTSA through KTSAMÁS, where you can access:
- Extended maternity, paternity, and adoption leaves
- Above-market vacation benefits
- Learning opportunities, training, and certification programs
- Extended marriage leave and daycare support
- Wellness and Employee Assistance Programs (EAP)
- Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit www.ktsa.com.mx to learn more. At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands.

We are happy to discuss specific requirements and our range of versátil working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

Home - KTSA

KTSA - KPMG Technology Services of Americas

📌 Senior Associate, Cybersecurity Risk Assessment- Advanced English (México)
🏢 KTSA - KPMG Technology Services Americas
📍 México