About the Role

Our client is seeking a knowledgeable and detail-oriented Consultor de Cumplimiento y Gobernanza de Seguridad (GRC) to join their growing team in Morelia, Michoacán . This role is essential for ensuring that the organization's security practices align with industry regulations, internal policies, and best practices. You will be responsible for assessing risks, developing policies, and implementing frameworks to maintain a strong governance structure. The adecuado candidate has a solid understanding of GRC principles, regulatory landscapes (e.g., GDPR, HIPAA, local data protection laws), and experience with security audits. This is a great opportunity to make a significant impact on the company's compliance posture and work in a supportive environment in Morelia . We are looking for an individual who is proactive, analytical, and possesses excellent documentation and communication skills to effectively convey compliance requirements and strategies. Your work will be crucial in minimizing legal and financial risks associated with non-compliance.

Key Responsibilities

- Develop, implement, and manage security policies, standards, and procedures.
- Conduct risk assessments and develop mitigation plans.
- Ensure compliance with relevant laws, regulations, and industry standards.
- Manage security audits and assessments, both internal and external.
- Develop and maintain GRC frameworks and documentation.
- Monitor and report on the organization's compliance posture.
- Collaborate with legal, IT,



and business units to address compliance requirements.
- Provide guidance and training on security policies and compliance matters.
- Stay up-to-date with changes in regulations and security best practices.
- Manage third-party risk and vendor security assessments.

Requirements

- Bachelor's degree in Information Security, Computer Science, Law, or a related field.
- Minimum of 3 years of experience in GRC, IT audit, or information security compliance.
- Strong understanding of GRC principles, frameworks (e.g., COBIT, ISO 27001), and regulatory requirements.
- Experience with risk assessment methodologies and tools.
- Knowledge of data privacy regulations (e.g., GDPR, CCPA) and cybersecurity laws.
- Excellent analytical, problem-solving, and organizational skills.
- Strong written and verbal communication skills, including report writing.
- Ability to work independently and manage multiple projects simultaneously.
- Familiarity with security audit processes and procedures.
- Relevant certifications such as CISA, CRISC, CISM, or CISSP are highly desirable.

Benefits

- Competitive salary commensurate with experience.
- Comprehensive health, dental, and vision insurance.
- Opportunities for professional development and GRC certifications.
- A stable and supportive work environment in Morelia .
- Exposure to a wide range of compliance and governance challenges.
- Generous paid time off and holidays.
- Retirement savings plan.
- Team-building activities and professional networking events.

📌 Consultor de Cumplimiento y Gobernanza de Seguridad (Morelia)
🏢 Placements24
📍 Morelia