Information Security Manager

TL;DR

Information Security Manager (Fintech): Managing and improving information security operations within a financial services context with an accent on governance, risk, and compliance frameworks. Focus on supporting regulatory audits, drafting responses, and ensuring consistent security controls across global teams.

Location: Hybrid in Mexico City (3 days/week in office)

Company

hirify.global is building a global financial super app, helping 70+ million customers manage their money with products for spending, saving, investing, and more.

What you will do

• Manage information security BAU operations, including vulnerability and patch management, KRIs tracking, and control effectiveness assessments.
• Advise on and implement information security policies into practical, compliant procedures aligned with local regulations.
• Support regulatory audits and engagements with CNBV and Banxico.
• Draft, review, and support responses to regulatory requests and RFIs.
• Conduct third-party security reviews, risk assessments, and annual vendor reviews.
• Collaborate with Global Information Security, Risk, and Compliance teams to ensure consistency and scalability of controls.

Requirements

• 4+ years of experience in information security or IT operations within financial services, banking, or fintech.
• Knowledge of InfoSec governance, risk, and compliance frameworks.
• Experience working with regulatory requirements and financial authorities.
• Familiarity with InfoSec controls across multiple security domains.
• Technical understanding of cloud environments and modern technology stacks, including Linux and Windows operating systems.
• Fluency in English.
• Must be based in Mexico City.

Nice to have

• Hands-on coding experience with SQL.
• A STEM degree.
• Relevant information security certifications (CEH, CISM, CISA, CISSP, Comptia Security+).

Culture & Benefits

• Certified as a Great Place to Work™.
• Multicultural, hard-working team.
• Strong focus on diversity and inclusion, with an inaugural D&I Framework launched in 2021.