Cyber Security Consultant

Cyber Security ConsultantJob Title: Cyber Security ConsultantLocation: Monterrey cityExperience : 3+_ yrs Seniority: Mid-LevelEmployment type : ContactWork Mode: On-SiteLanguages: English (Intermediate), Spanish
Hard Skills: - Change Management, Cloud Solution - Azure, Communication, Consultant Security, Information Security Architect, StrategySoft Skills: - Change Management, Communication, Decision making, Empathy, Innovation & Creativity, Integrity, Leadership, Problem Solving, Resilience & Adaptability, Strategic Thinking & Execution, Teamwork & Collaboration, Time ManagementResource Description:- Cybersecurity consultant responsible for assessing security control maturity, identifying risks and gaps, recommending improvements, and driving remediation activities to align acquired organizations with company security standards and industry best practices throughout the M&A lifecycle.Requirements:- 3+ years of experience in Cybersecurity, Information Security, or IT Risk Management. - 3+ years of experience conducting security assessments, security posture reviews, and gap analysis. - Experience supporting Mergers & Acquisitions (M&A), due diligence, integration, or divestiture cybersecurity activities.- Experience with third-party risk assessments and vendor security reviews. - Strong knowledge of security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, NIST 800-53, and SOC2. - Experience evaluating and improving security controls across:- Identity & Access Management (IAM)- Network Security - Endpoint Protection- Vulnerability Management- Security Monitoring and Incident Response- Data Protection- Cloud Security Experience developing remediation roadmaps and tracking corrective actions through closure. - Ability to communicate security risks and recommendations to both technical teams and executive stakeholders.- Experience coordinating with cross-functional teams, including IT, Legal, Compliance, Risk Management, and business leaders.- Familiarity with regulatory and privacy requirements (e.g., GDPR, CCPA, PCI DSS, SOX) is preferred.Responsibilities:- Conduct cybersecurity due diligence and security posture assessments for M&A activities. - Identify security risks, control gaps, and compliance deficiencies. - Evaluate security controls against corporate standards and industry best practices. - Develop and prioritize remediation plans to address identified risks. - Coordinate with business, IT, and security stakeholders throughout the M&A lifecycle. - Track and report remediation progress to ensure timely risk reduction. - Support the integration of acquired companies into the organization's cybersecurity framework. - Prepare executive-level reports and recommendations to support decision-making.Additional Comments:- Preferred Certifications CISSP CISM CRISC ISO 27001 Lead Implementer or Lead Auditor CCSP (for cloud-focused environments) Security+, CASP+, or equivalent certifications.
Interested candidate can share the updated CV at [email protected]