Cyber Security Specialist

Risk & Compliance – Vulnerability Manager

Location: Guadalajara (GDL), Mexico – Hybrid

Work Model: 3 days onsite / 2 days remote

Experience: 7–10 years overall IT experience

Relevant Experience: 5+ years in Vulnerability Management & Compliance

Shift: 24x7 rotational support

Role Overview

Seeking a Vulnerability Manager / Cybersecurity professional with 7–10 years of IT experience and at least 5 years in vulnerability management, cybersecurity risk, and compliance monitoring . The role will analyze vulnerabilities across enterprise environments, drive remediation, monitor compliance, and support risk-based security decisions.

Required Skills

• Vulnerability Management
• Vulnerability Assessment & Analysis
• Vulnerability Scanning
• Penetration Testing Analysis
• Vulnerability Remediation & Validation
• Cybersecurity Risk Management
• Security Compliance Monitoring
• Cloud Security
• Networking & Systems Administration
• Security Automation
• IT Controls & Governance
• Security Dashboards & Reporting
• Risk-Based Security Controls
• Third-Party/Vendor Management

Compliance & Frameworks

• SOX
• PCI DSS
• HIPAA
• NERC CIP
• DPA
• ISO 27001
• NIST
• COBIT
• ITIL

Key Responsibilities

• Analyze vulnerability data from internal/external scans and penetration testing across infrastructure and applications.
• Perform recurring and on-demand vulnerability scans across enterprise environments.
• Assess vulnerability risk and recommend appropriate remediation and security controls.
• Work with business and technical teams to communicate vulnerability risks and remediation priorities.
• Support vulnerability remediation efforts and validate vulnerabilities after remediation.
• Recommend solutions including patching, security controls, code changes, infrastructure changes, and development-process improvements.
• Execute the organization's vulnerability lifecycle management strategy .
• Develop and maintain vulnerability dashboards, reports, and MIS documentation.
• Work with third-party vendors to improve vulnerability management processes.
• Monitor security intelligence and vulnerability feeds to identify emerging threats.
• Support compliance and IT control monitoring across enterprise environments.
• Work independently while collaborating with infrastructure, application, security, and compliance teams.

Preferred Certifications

• CISM
• CISSP
• CISA
• ISO 27001
• CCNA / CCNP / CCSA or other relevant technical certifications