Cybersecurity Manager

About the role

BMA Group Global is seeking a Cybersecurity & IT Risk Manager to define, implement, and oversee the organization’s information security strategy, policies, processes, and controls. The role protects digital assets, supports regulatory compliance and technology risk management, and maintains incident response readiness in alignment with corporate guidelines and industry best practices. Its primary objective is to safeguard the confidentiality, integrity, and availability of information systems while strengthening organizational resilience against internal and external threats.

Responsibilities

• Develop and maintain an information security strategy aligned with business objectives and regulatory requirements.
• Design, implement, and oversee cybersecurity policies, procedures, and controls based on recognized standards and frameworks, including ISO/IEC 27001, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, HIPAA, SOX, GLBA, and CCPA.
• Define and monitor cybersecurity KPIs, metrics, and executive dashboards.
• Promote security awareness, ethics, and responsible technology usage across the organization.
• Identify, assess, and manage cybersecurity and technology risks; implement mitigation and response plans.
• Coordinate and oversee internal and external security audits, including remediation tracking and corrective action plans.
• Ensure compliance with applicable privacy, cybersecurity, and data protection regulations.
• Collaborate with IT, Legal, Compliance, Audit, and Operations to strengthen governance and risk management practices.
• Lead cybersecurity incident response activities and crisis management efforts.
• Coordinate communications and response actions with key stakeholders during security incidents.
• Develop and maintain resilience and recovery strategies to minimize operational disruption.

Datos clave

• The role oversees information security strategy, policies, processes, and controls.
• Responsibilities include cybersecurity risk management, regulatory compliance, and incident response.
• The role is based in Guaynabo, Puerto Rico.