Cyber Risk Analyst

About the role

The Cyber Risk Analyst will join Levi Strauss & Co.'s Cyber Risk & Strategy team in Mexico City. This role is responsible for implementing the cyber risk operational strategy, managing the Governance, Risk, and Compliance (GRC) program, and conducting internal and third‑party security risk assessments.

Key responsibilities

• Implement the cyber risk strategy and advise on improvement opportunities.
• Align programs with ISO 27005, CIS Top 18 Controls, and the NIST Cybersecurity Framework.
• Develop and integrate new security processes, communicating changes to stakeholders.
• Lead process‑improvement discussions and present outcomes to senior management.
• Support GRC tool administration and escalate strategic decisions to the risk manager.
• Tier vendors, perform security risk assessments, and prioritize controls based on risk frameworks.
• Manage the policy lifecycle, including governance, attestation, and revisions.
• Oversee day‑to‑day exception handling within the GRC tool for GIS teams.

Required profile

• Experience with cyber risk management and GRC program administration.
• Ability to conduct internal and third‑party security risk assessments.
• Strong communication skills for presenting findings to senior leadership.
• Collaborative mindset to work with regional BISOs and internal stakeholders.

Required skills

• ISO 27005
• CIS Top 18 Controls
• NIST Cybersecurity Framework
• GRC tool administration