[Hiring] GRC- Cyber Risk @GSB Solutions

Role Description

• Conduct security and risk assessments of applications, software, and technology solutions.
• Identify security gaps, vulnerabilities, control weaknesses, and potential risks within applications and software environments.
• Review application security assessment reports, penetration testing results, vulnerability scans, and other technical security documentation.
• Analyze security findings, evaluate their severity and potential business impact, and document remediation recommendations.
• Track security findings and remediation plans, ensuring appropriate follow-up with application owners, developers, engineering teams, and other stakeholders.
• Review technical evidence to validate security controls and assess whether identified vulnerabilities have been properly addressed.
• Maintain accurate risk registers, assessment documentation, remediation trackers, and audit evidence.
• Coordinate with cybersecurity, IT, application development, infrastructure, and business teams to drive remediation activities.
• Prepare security assessment reports, status updates, and risk summaries for relevant stakeholders.
• Support cybersecurity governance, risk management, and compliance activities aligned with relevant security frameworks and industry best practices.

Qualifications

• 3+ years of experience in Cyber Risk, Application Security Assessments, Software Security Assessments, or Vulnerability Management.
• Hands-on experience assessing applications or software from a security and risk perspective.
• Experience identifying security vulnerabilities, application security gaps, and control deficiencies.
• Understanding of vulnerability assessment and penetration testing (VAPT) processes and findings.
• Experience reviewing technical security evidence and assessment reports.
• Experience tracking security findings and coordinating remediation activities through closure.
• Strong documentation, analytical, reporting, and stakeholder management skills.
• Proficiency with Microsoft Excel and SharePoint.
• Experience with ServiceNow or similar risk, issue, or ticket management platforms.
• Advanced English communication skills, both written and verbal.

Requirements

• Familiarity with application security testing methodologies and tools such as SAST, DAST, and SCA.
• Knowledge of OWASP Top 10 and common application security vulnerabilities.
• Familiarity with vulnerability management tools and platforms.
• Understanding of secure software development lifecycle (SSDLC) practices.
• Knowledge of security frameworks such as NIST, ISO 27001, CIS, and SOC 2.
• Relevant certifications such as Security+, CEH, GSEC, or equivalent.

Key Competencies

• Strong understanding of application security risks.
• Analytical and problem-solving capabilities.
• Attention to detail and evidence-based risk assessment.
• Ability to communicate technical security findings to technical and non-technical stakeholders.
• Strong follow-up and coordination skills.
• Ability to manage multiple assessments and remediation activities simultaneously.
• ADVANCED CONVERSATIONAL ENGLISH AND SPANISH ESSENTIAL (Will be evaluated).
• If you are a foreigner residing in Mexico, you must have a valid INE, CURP, NSS, and RFC.

Job Type

Remote.

Location

This position is fully remote; however, candidates must be currently residing in Mexico.

Salary

$55,000 MXN gross

Benefits

• Excellent superior benefits.