You will

Support/coordinate the business in managing and fulfilling its 1st Line Risk Management activities
Proactively identify risk areas and tackle relevant remediation activities
Create appropriate governance to facilitate the implementation, execution and monitoring of controls
Define and rate the risk environment
Challenge the design and implementation of controls, implement and own relevant new controls
Create appropriate reports for the leadership team to understand the full spectrum of risks
Add a risk perspective to strategy and product development
Drive and complete documentation activities to minimize single point sensitivities
Conduct process mapping
Coordinate audit and inspections actions and review/challenge both audit and the business
Being a liaison between Risk and Control 2nd line of defense roles and the business with the benefit that core business employees are not distracted from their business roles.
Responsible for escalating the operational losses within the timing defined by the Operational Risk guidelines.
Responsible of supporting the 2nd Line of defense on defining the significant risks and controls owned by the business during the annual exercise (or every time that is needed) to complete the Risk and Control Assessment (RCA)

Main responsibilities:

Manage control implementation projects
Provide information and indicators for IT and cybersecurity governance and risk assessments
Assess internal and third party IT and cybersecurity regulatory compliance
Provide information and evidence of compliance to auditors, regulators and governance (2nd line of defense) areas

What we are looking for:

Bachelor’s Degree
4+ years of experience in a regulatory, compliance, risk or audit position related to IT and cybersecurity
Good knowledge of financial regulations (IT and cybersecurity)
Experience with risk assessments, information security assessments
Good knowledge of information security for financial services
Good knowledge of financial services and privacy regulations in Mexico
Experience with payment card industry (PCI) standard and certification process
Experience in managing multidisciplinary projects for implementing IT and cybersecurity implementations
Experience with interacting with auditors and financial regulators

Conversational English