We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore .

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

- Experience a collaborative, inclusive, and multicultural workplace where you belong.
- Excel by creating impact and leaving your mark on global projects.
- Expand your potential with real career paths, learning programs, and mentorship.
- Express your individuality — come as you are, and thrive as your authentic self.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS , our total rewards program, designed to support your well-being, goals, and personal milestones.

Key Responsibilities:

- Conduct cybersecurity risk assessments for technology-enabled projects using industry-standard and firm-specific control frameworks. Define security requirements, perform control and evidence reviews, facilitate security testing (including penetration testing and static application security testing (SAST)), and manage residual risk.
- Apply knowledge of software development, secure coding principles, and emerging security standards to identify risks, communicate findings, and recommend remediation or compensating controls.




- Partner with vendors and project teams to track remediation activities, validate corrective actions, and ensure identified risks are addressed appropriately.
- Serve as the primary liaison between project teams and Information Security, coordinating security resources and ensuring security objectives, timelines, and control requirements are met.
- Support the continuous improvement of security processes and promote cybersecurity best practices through knowledge sharing, skills development, and process enhancements.
- Foundational expertise in cloud and AI security, including cloud architecture, identity and access management, data protection, secure coding practices, and risk assessment methodologies for cloud-based and AI-enabled applications.

Qualifications:

- Bachelor’s degree or equivalent work experience with 3-5 years of recent experience in information security assessment or compliance.
- CISSP or CRISC preferred.
- Strong understanding of cybersecurity principles, controls, and technologies.
- Familiarity with NIST 800-53, NIST 800-171, NIST 800-66, CMMC, NIST Framework, ISO, HITRUST, PCI, and/or other relevant control frameworks.
- Ability to positively influence, mentor and be a credible source of knowledge to less experienced team members.




- Strong verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.

Familiarity with:

- CIA Security Triage
- SSL TLS
- Encription in transit and encription at rest
- Knowledge of cryptography
- SOC 1, SOC 2, SOC 3 reports
- Type 1 and Type 2
- NIST 800 series
- 800-53
- OWASP TOP10

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

- Extended maternity, paternity, and adoption leaves
- Learning opportunities, training, and certification programs
- Extended marriage leave and daycare support
- Wellness and Employee Assistance Programs (EAP)
- Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of versátil working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

#J-18808-Ljbffr

📌 Senior Associate, Cybersecurity Risk Assessment- Advanced English (Centro)
🏢 KTSA - KPMG Technology Services Americas
📍 Centro