(Busqueda Urgente) CISO - Mexico...

What we're looking for

We are seeking an experienced Chief Information Security Officer (CISO) to lead our Information Security function in Mexico. This role is accountable for defining, implementing, and continuously improving the organization’s information security policies, governance, and controls in alignment with regulatory requirements (CNBV, Banco de México) and industry best practices. As CISO, you will act as the primary authority on information security for a regulated Fintech (IFPE), ensuring the confidentiality, integrity, and availability of critical systems and data. You will collaborate closely with executive leadership, regulators, and technical teams to safeguard the organization’s technology infrastructure, services, and customer trust.

What you'll be doing

• Define, approve, and oversee the implementation of information security policies, standards, and procedures.
• Maintain and further develop the IFPE’s Information Security Master Plan and ensure it is reviewed and updated at least annually.
• Verify that access profiles and privileges are aligned with job roles and authorize their assignment across internal and third-party infrastructure.
• Ensure secure configuration and monitoring of critical technology systems, including operating systems, databases, and cloud environments.
• Approve and monitor remediation measures for deficiencies identified in audits, assessments, or incidents.
• Lead the detection, response, and recovery process for information security incidents and oversee the incident response team.
• Report incidents, corrective actions, and preventive measures to executive leadership in a timely manner.
• Oversee annual security training and awareness programs for employees, customers, and third-party providers.
• Provide monthly information security management reports and risk indicator assessments to the Sole Administrator.
• Respond to information security requirements issued by CNBV, Banco de México, and internal stakeholders.
• Ensure that sensitive information handled by providers is encrypted and establish procedures for decryption when required.

What you'll need

Benefits

#J-18808-Ljbffr