About the Role

Our client, a globally recognized consulting firm, is seeking an experienced Information Security Consultant specializing in Governance, Risk, and Compliance (GRC) for a remote, contract-based engagement. This role is adecuado for a seasoned professional who can guide organizations through complex regulatory landscapes and help them establish robust information security frameworks. You will be responsible for assessing security risks, developing compliance strategies, and ensuring adherence to industry standards and regulations. The position requires a deep understanding of GRC principles, frameworks such as ISO 27001, NIST, and PCI DSS, and the ability to translate technical requirements into actionable business recommendations. This is a fully remote position, allowing you to leverage your expertise from anywhere in Mexico.

Key Responsibilities

- Conduct comprehensive information security risk assessments and gap analyses.
- Develop and implement GRC programs, policies, and procedures tailored to client needs.
- Advise clients on compliance with relevant regulations and standards (e.g., GDPR, CCPA, ISO 27001, NIST CSF).
- Assist clients in preparing for and undergoing security audits and certifications.
- Develop security awareness training materials and programs.
- Evaluate and recommend security technologies and tools to support GRC objectives.
- Analyze security incidents and contribute to remediation efforts from a governance perspective.
- Prepare detailed reports and presentations for stakeholders on security posture and compliance status.
- Stay abreast of evolving cybersecurity threats, regulatory changes, and best practices in GRC.




- Collaborate with client teams to integrate security and compliance into business processes.

Requirements

- Bachelor's or Master's degree in Information Security, Computer Science, Business, or a related field.
- Minimum of 6 years of experience in information security, with a strong emphasis on GRC.
- Proven experience in conducting risk assessments and developing security policies.
- In-depth knowledge of major information security frameworks (ISO 27001, NIST, COBIT, SOC 2).
- Familiarity with various regulatory requirements (e.g., data privacy laws, industry‑specific regulations).
- Excellent analytical, problem‑solving, and critical thinking skills.
- Strong report writing and presentation skills.
- Ability to manage multiple projects simultaneously and meet deadlines.
- Excellent interpersonal and communication skills, with the ability to build rapport with clients remotely.
- Relevant certifications such as CISM, CRISC, CISSP are highly preferred.
- Must be authorized to work remotely within Mexico.

Benefits

- This contract role offers a highly competitive hourly rate, reflecting the specialized skills and experience required.
- You will have the flexibility to work remotely from anywhere in Mexico, enjoying a great work-life balance.
- This engagement provides an excellent opportunity to work with a diverse portfolio of clients and gain exposure to various industries.
- Our client offers professional development opportunities and the chance to be part of a globally recognized consulting firm.
- Engage in challenging projects that enhance your expertise in information security governance, risk, and compliance.

📌 Consultor de Seguridad de la Información (Monterrey)
🏢 Placements24
📍 Monterrey