Cyber GRC
RemoteArgentina
Job Summary
Design and maintain the cybersecurity Governance, Risk & Compliance program by developing security policies, procedures, and standards. Evaluate and track security risks across processes, systems, and vendors while updating the risk register. Coordinate internal and external audits against frameworks including ISO 27001, PCI-DSS, SOC 2, and NIST, and manage third-party risk assessments. Monitor regulatory changes in LATAM and Europe to adjust controls accordingly. Track security findings and collaborate with Engineering, Legal, and Operations to ensure effective remediation. Implement security awareness programs for employees. Work 100% remotely with autonomy to influence cross-functional teams.
Required Qualifications
- Professional in Systems Engineering, Computer Science, Cybersecurity or related fields
- At least 3 years of experience in GRC, compliance or cybersecurity risk management roles
- Knowledge of frameworks such as ISO 27001, PCI-DSS, SOC 2 or NIST CSF
- Experience in creating information security policies and procedures, and conducting third-party risk assessments
- Knowledge of data protection and security regulations applicable to the financial sector in LatAm
- Ability to communicate risk to both technical and non-technical areas
- Autonomy to work 100% remotely and coordinate with multiple company areas
Desired Qualifications
- Previous experience in fintech, banking or other regulated companies
- Handling of GRC tools (Vanta, Drata, OneTrust or similar)
- Familiarity with cybersecurity technical concepts (pentesting, vulnerability management, cloud architecture)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.