Important IT company At the Latin American level, growth requires: GRC
- Cyber Risk

Key Responsibilities
• Conduct security and risk assessments of applications, software, and technology solutions.
• Identify security gaps, vulnerabilities, control weaknesses, and potential risks within applications and software environments.
• Review application security assessment reports, penetration testing results, vulnerability scans, and other technical security documentation.
• Analyze security findings, evaluate their severity and potential business impact, and document remediation recommendations.
• Track security findings and remediation plans, ensuring appropriate follow-up with application owners, developers, engineering teams, and other stakeholders.
• Review technical evidence to validate security controls and assess whether identified vulnerabilities have been properly addressed.
• Maintain accurate risk registers, assessment documentation, remediation trackers, and audit evidence.
• Coordinate with cybersecurity, IT, application development, infrastructure, and business teams to drive remediation activities.
• Prepare security assessment reports, status updates, and risk summaries for relevant stakeholders.
• Support cybersecurity governance, risk management, and compliance activities aligned with relevant security frameworks and industry best practices. Required Qualifications
• 3+ years of experience in Cyber Risk, Application Security Assessments, Software Security Assessments, or Vulnerability Management.
• Hands-on experience assessing applications or software from a security and risk perspective.
• Experience identifying security vulnerabilities, application security gaps, and control deficiencies.




• Understanding of vulnerability assessment and penetration testing (VAPT) processes and findings.
• Experience reviewing technical security evidence and assessment reports.
• Experience tracking security findings and coordinating remediation activities through closure.
• Strong documentation, analytical, reporting, and stakeholder management skills.
• Proficiency with Microsoft Excel and SharePoint.
• Experience with ServiceNow or similar risk, issue, or ticket management platforms.
• Advanced English communication skills, both written and verbal. Preferred Qualifications
• Familiarity with application security testing methodologies and tools such as SAST, DAST, and SCA.
• Knowledge of OWASP Top 10 and common application security vulnerabilities.
• Familiarity with vulnerability management tools and platforms.
• Understanding of secure software development lifecycle (SSDLC) practices.
• Knowledge of security frameworks such as NIST, ISO 27001, CIS, and SOC 2.
• Relevant certifications such as Security+, CEH, GSEC, or equivalent. Key Competencies
• Strong understanding of application security risks.
• Analytical and problem-solving capabilities.
• Attention to detail and evidence-based risk assessment.
• Ability to communicate technical security findings to technical and non-technical stakeholders.
• Strong follow-up and coordination skills.
• Ability to manage multiple assessments and remediation activities simultaneously. ADVANCED CONVERSATIONAL ENGLISH AND SPANISH ESSENTIAL (Will be evaluated). If you are a foreingner residing in Mexico, you must have a valid INE, CURP, NSS and RFC.

Job type
Remote.

Location:
Mexico -This position is fully remote; however, candidates must be currently residing in Mexico.

Salary:
$55,000 MXN gross

Benefits:
Excellent superior benefits.

📌 GRC- Cyber Risk | Remote in Mexico (Ciudad de México)
🏢 Gsb Solutions
📍 Ciudad de México