Cybersecurity Supplier Assessor (Santiago de Querétaro)

Snapshot of Your Day

We are looking for a cybersecurity professional who is energized about safeguarding our organization’s cyber posture by utilizing your skills to identify and manage cybersecurity risks relating to supplier engagements.

How You’ll Make An Impact

• Conduct detailed assessments of cybersecurity practices and third‑party controls; analyze assessment findings to identify risks and gaps in security posture.
• Collaborate with key stakeholders to develop and implement improvement plans.
• Understand and translate cybersecurity legal clauses and terms within supplier contracts; lead and support required negotiations of those terms with procurement and/or legal.
• Keep abreast of cybersecurity trends and emerging threats to continually improve assessment methodologies.
• Make a direct impact on the organization’s cybersecurity posture by ensuring third‑party suppliers meet the highest security standards.

What You Bring

• University degree from a faculty with a preference for computer science, data science, information technology, legal fields, or an equivalent technology/business management related degree.
• Fluency in English.
• Familiarity with information security risk methodologies, frameworks such as ISO 27001, NIST, COBIT and industry best practices to help ensure a secure cloud computing environment.
• Keen eye for detail and passion for excellence; deep understanding of cybersecurity principles; exceptional analytical abilities; familiarity with standard methodologies regarding security of networks, services, products, operations, etc.
• Good communication and presentation skills; passion for listening and collaborating with different functions like procurement, legal and suppliers.
• Ability to communicate with all levels of the organization up through and including executive management.
• Experience in the end‑to‑end management of supplier assessments, integration of application security standard processes, secure coding practices, etc. into