Manager, Information Security & IT Risk

About KTSA

We are KTSA – KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore .

Explore isn’t just a word — it’s how we grow, lead, and thrive. It’s the mindset that drives our culture and shapes every opportunity:

• Experience a collaborative, inclusive, and multicultural workplace where you belong.
• Excel by creating impact and leaving your mark on global projects.
• Expand your potential with real career paths, learning programs, and mentorship.
• Express your individuality — come as you are, and thrive as your authentic self.

Responsibilities

Leadership & Risk Management

• Lead and oversee IT and Information Security Risk Management programs including risk identification, assessment, mitigation, and monitoring.
• Drive structured risk assessments and define mitigation strategies aligned with business objectives.
• Act as a trusted advisor to leadership providing risk-based insights.
• Oversee risk lifecycle management and ensure timely remediation.
• Lead development of risk governance practices aligned to frameworks (ISO 27001, NIST).
• Manage stakeholder relationships and lead and mentor team members.

Data, Reporting & Advanced Analytics

• Define and oversee risk data management ensuring quality, governance, and integrity.
• Lead development of Power BI dashboards and enterprise reporting frameworks.
• Establish automated data pipelines and reporting processes.
• Leverage Databricks for large-scale data processing and analytics.
• Drive adoption of data-driven and predictive analytics for proactive risk management.
• Translate analytics into executive-level insights and reporting.

Strategic Responsibilities

• Define and align risk strategy, appetite, and tolerance.
• Drive automation and continuous improvement initiatives.
• Lead cross-functional transformation initiatives.
• Define KPIs and KRIs and support audits and compliance activities.

Qualifications

Technical Skills

• Proven experience in Information Security, IT Risk, or GRC leadership roles.
• Strong knowledge of risk management, compliance frameworks, and internal controls.
• Experience with ISO 27001, NIST, CIS, or COBIT.
• Experience with Databricks, Power BI, and data analytics.
• Strong understanding of data governance and lifecycle management.

Education & Certifications

• Bachelor’s degree in IT, Computer Science, or related field.
• Preferred certifications: CISSP, CISM, CRISC, ISO 27001.
• Suggested Certifications in Data Analytics (Power BI, Databricks Azure).

Soft Skills

• Leadership and stakeholder influence skills.
• Proactive, self-driven and value-oriented mindset.
• Strong analytical and communication skills.
• Ability to manage multiple priorities and teams.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS , our total rewards program, designed to support your well-being, goals, and personal milestones.

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

• Extended maternity, paternity, and adoption leaves
• Above-market vacation benefits
• Hybrid work model
• Learning opportunities, training, and certification programs
• Extended marriage leave and daycare support
• Wellness and Employee Assistance Programs (EAP)
• Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of flexible working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

Home - KTSA

KTSA - KPMG Technology Services of Americas