ETISA is a Mexican technology consulting firm with more than 24 years of experience. We work with companies across many industries and help them grow through innovation and custom software solutions. As part of our ETISA vision, we are looking for a new team member with experience in cybersecurity and risk management.

The selected candidate will join the Cyber Risk Management (CRM) program of a leading automotive company in North America. The role combines technical security analysis with project management: you will identify, assess, track, and communicate the security risks posed by external vendors and partners.

Responsibilities

- Conduct cybersecurity risk assessments of vendors and external partners, identify security gaps, and prepare reports with actionable recommendations.
- Coordinate third-party cyber risk management initiatives through every stage: planning, execution, coordination with the teams involved, reporting, and monitoring.
- Perform standardized inherent risk assessments and validate risk ratings, control evaluations, and remediation plans.
- Track remediation activities through to closure, in line with the client's risk tolerance.
- Use Governance, Risk, and Compliance (GRC) platforms and AI-driven automation tools to streamline assessments, reporting, and evidence collection.
- Work with the cybersecurity, procurement, legal, internal audit, and business teams.
- Identify opportunities to improve the program's processes and tools.
- Train internal teams and vendors on security best practices and emerging threats.




- Prepare metrics, dashboards, and executive reports for leadership.

Requirements:
- Master's degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related field.
- 1 to 3 years of experience in cybersecurity, third-party risk management, IT risk, or compliance.
- Knowledge of cybersecurity principles, risk assessment methodologies, and security control frameworks.
- Knowledge of Mexican Legal and Regulatory Frameworks related to Cybersecurity and Compliance.
- Experience on projects that require coordination across multiple teams.
- Native or near-native English and Spanish (required).
- Excellent written and verbal communication, including the ability to explain technical risks to non-technical audiences.
- Strong attention to detail and rigorous documentation.
- Availability to work outside regular hours occasionally when the project requires it.

Nice to have:
- Experience with Governance, Risk and Compliance (GRC) platforms.
- Familiarity with frameworks such as NIST CSF, SOC 1 & 2, or ISO/IEC 27001.
- Experience applying AI tools to work processes.

What we offer:
- Direct hire with superior statutory benefits under Mexican labor law.
- International projects with real impact.
- A people-centered work environment with opportunities for professional growth.

At ETISA, we believe our clients' success starts with the growth of our people. If this role matches your experience, apply through OCC Mundial.

📌 Cybersecurity Risk Management Analyst (Ciudad de México)
🏢 Estrategia en Tecnología de Información
📍 Ciudad de México