Cybersecurity Governance & Compliance Specialist

About the role

The Cybersecurity Governance & Compliance Specialist will lead the identification, assessment, and management of cybersecurity risks across the organization. This role ensures that the company’s security program aligns with internal policies, regulatory requirements, and industry standards.

Key responsibilities

• Analyze existing cybersecurity policies and configurations to verify compliance with regulations and corporate directives.
• Conduct regular audits, risk assessments, and gap analyses for ISO 27001, ISO 27701, PCI‑DSS, and PDPL.
• Provide advisory support on governance and compliance matters to senior management.
• Assist incident response teams by identifying governance‑related issues during security events.
• Prepare reports and metrics to track compliance effectiveness and governance performance.
• Develop and maintain cybersecurity strategies, policies, and documentation that support business objectives and legal obligations.
• Monitor system compliance with resilience, dependability, and security requirements.

Required profile

• Bachelor’s degree in a relevant field.
• Minimum 7 years of experience in cybersecurity governance, risk management, or compliance.
• Relevant certifications such as ISO 27001, ISO 27701, CISA, CISM, CISSP, CRISC, or CGRC are preferred.

Required skills

• ISO 27001 compliance
• ISO 27701 compliance
• PCI‑DSS audit experience
• PDPL regulatory knowledge

What we offer

• Opportunity to shape the organization’s security posture.
• Collaboration with senior leadership and incident response teams.
• Professional development in advanced cybersecurity standards.