Security Specialist (GRC)

Location: Mexico City (Hybrid)

Company

hirify.global runs and reimagines mission-critical technology systems that drive advantage for the world’s leading businesses.

What you will do

• Develop and implement information security policies, procedures, and asset classification models.
• Perform risk assessments and produce security effectiveness evaluation reports.
• Configure and monitor network performance to protect organizational infrastructure from cyber-attacks.
• Analyze cybersecurity data to identify patterns and create innovative risk management and quantification ideas.
• Conduct security awareness workshops and provide technical training on security best practices.

Requirements

• 2+ years of experience in GRC frameworks (enterprise risk, internal audit, compliance, policy, or third-party risk).
• Working knowledge of audit and compliance tools and security standards such as ISO27001 and NIST.
• Experience advising clients on regulatory requirements including HIPAA, PCI DSS, GDPR, or DORA.
• Proven experience coordinating SOC 2 and/or ISO 27001 audits.
• Must be based in Mexico City for a hybrid work arrangement.

Nice to have

• Certifications: CRISC, CGEIT, CERA, CISM, CISA, or CISSP.
• Knowledge of statistical analysis and models.
• Basic skills in network, compute, and cloud computing.
• Experience in project management for security initiatives.

Culture & Benefits

• Hybrid-friendly work culture that prioritizes employee well-being.
• "Be Well" programs supporting financial, mental, physical, and social health.
• Access to cutting-edge learning and certifications from Microsoft, Google, and Amazon.
• Inclusive environment focused on empathy, belonging, and shared success.