About KTSA

We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore.

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

- Experience a collaborative, inclusive, and multicultural workplace where you belong.
- Excel by creating impact and leaving your mark on global projects.
- Expand your potential with real career paths, learning programs, and mentorship.
- Express your individuality — come as you are, and thrive as your authentic self.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS, our total rewards program, designed to support your well-being, goals, and personal milestones.

The Regional Cyber Operations and Security Automation Manager supports the RISO/BISO functions across the Americas, with primary responsibility for LATAM. The role combines regional cyber operations coordination, security technology oversight, vulnerability and control monitoring, Member Firm support, and practical automation using approved AI agents and AI personas. The position serves as a trusted liaison among regional stakeholders, Americas Member Firms, technology teams, security vendors, and KPMGI teams.

Key Responsibilities

- Support regional monitoring and follow-up of vulnerabilities, security incidents, endpoint and configuration metrics, dashboard exceptions, SLA breaches, and overdue remediation items across LATAM Member Firms.
- Coordinate with regional delivery teams, service owners, NITSOs, CIO organizations, and KPMGI teams to clarify requirements, validate deadlines, communicate required actions, and track completion.
- Prepare concise executive updates, operational reports, presentation materials, metrics, and supporting evidence for RISO/BISO leadership and LATAM governance forums.
- Maintain awareness of information security regulations, threat trends, technologies, and control practices relevant to Latin America and the United States.
- Escalate material issues, unresolved dependencies, control gaps, and delivery risks to the appropriate RISO/BISO or service leadership.

AI Agent and Persona Automation Responsibilities

- Identify, prioritize, and document opportunities to automate repeatable RISO, BISO, and LATAM cybersecurity processes using approved AI agents, AI personas, workflow automation, and orchestration capabilities.
- Design and maintain AI-assisted workflows for operational intake triage,



evidence collection, campaign tracking, status reporting, action-item follow-up, knowledge retrieval, security operations use cases, and executive summary generation.
- Develop role-based AI personas that support RISO leadership, BISO activities, and LATAM Member Firms while preserving human accountability, traceability, confidentiality, and segregation of duties.
- Define reusable prompts, decision logic, quality checks, exception paths, and human-approval controls for AI-enabled cybersecurity workflows.
- Partners with process owners and technical teams test automation outcomes, document limitations, monitor accuracy, and continuously improve solutions based on user feedback and control requirements.
- Ensure AI solutions follow applicable firm requirements for data protection, privacy, security, responsible AI, records management, and technology risk governance.

Technical Knowledge

- Strong working knowledge of Microsoft security technologies and tools used to protect enterprise identities, networks, endpoints, servers, applications, cloud environments, data, and other corporate devices.
- Practical knowledge of security solutions from other leading manufacturers, with the ability to evaluate alerts, findings, configurations, integrations, coverage gaps, and operational dependencies across a heterogeneous enterprise environment.
- Knowledge of endpoint detection and response, identity and access security, network protection, vulnerability management, cloud security, data protection, application security, security monitoring, incident response, and security posture management.
- Understanding of AI security solutions, including technologies and controls used to protect AI applications, models, agents, data, prompts, identities, integrations, and supporting infrastructure.
- Ability to work with security dashboards, reporting platforms, workflow and reporting tools, Microsoft 365 collaboration capabilities, and approved automation technologies to support regional cybersecurity operations.
- Familiarity with recognized frameworks and standards such as NIST SP 800-53, NIST SP 800-171, FIPS, ISO/IEC 27000 series, and knowledge of the current OWASP Top Ten, as applicable.

Qualifications and Experience

- Demonstrated experience in cyber operations, security monitoring, vulnerability management, endpoint or cloud security, incident coordination,



security technology operations, automation, or related information security work.
- 5 – 9 years of experience performing security reviews, IT audits, Cybersecurity technology implementations, vulnerability risk assessments, or similar roles. A bachelor’s degree or equivalent work experience is required.
- Bachelor’s degree or equivalent relevant work experience in cybersecurity, information systems, risk, audit, engineering, or a related discipline.
- Preferred certifications include CISSP, CCSP, CISA, CISM, CRISC, or equivalent professional experience.
- Strong analytical, troubleshooting, organizational, presentation, collaboration, and stakeholder-management skills, with a demonstrated ability to work effectively as part of cross-functional and multicultural teams while managing multiple concurrent priorities.
- Advanced English proficiency, written and verbal. Portuguese proficiency is highly desirable.

Working Expectations

- Operate as an individual contributor who can independently lead workstreams and influence cross-functional teams without direct authority.
- Maintain flexibility to participate in early morning sessions with KPMGI and other global teams when business needs require.
- Be available, when required, to support coordination of cybersecurity incidents outside normal business hours, including escalation, stakeholder communications, action tracking, and handoffs to the appropriate response teams.
- Handle sensitive and confidential information with discretion and maintain documentation suitable for internal or external review.

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

- Extended maternity, paternity, and adoption leaves
- Above-market vacation benefits
- Learning opportunities, training, and certification programs
- Extended marriage leave and daycare support
- Wellness and Employee Assistance Programs (EAP)
- Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit www.ktsa.com.mx to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands.

We are happy to discuss specific requirements and our range of adaptable working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

Home - KTSA

KTSA - KPMG Technology Services of Americas

📌 Senior Associate, Cybersecurity Incident Response - Advanced English (Miguel Hidalgo)
🏢 KTSA - KPMG Technology Services Americas
📍 Miguel Hidalgo