Cyber Security Specialist – Vulnerability Manager

About the role

We are seeking a seasoned Cyber Security Specialist to lead our vulnerability management program in Guadalajara. The role involves analyzing vulnerabilities across the enterprise, driving remediation, and supporting risk‑based security decisions in a hybrid work environment.

Key responsibilities

• Analyze vulnerability data from internal and external scans and penetration testing across infrastructure and applications.
• Perform recurring and on‑demand vulnerability scans across enterprise environments.
• Assess vulnerability risk and recommend remediation, patches, security controls, code or infrastructure changes.
• Collaborate with business and technical teams to communicate risks and prioritize remediation.
• Support remediation efforts and validate fixes after implementation.
• Execute the organization’s vulnerability lifecycle management strategy.
• Develop and maintain dashboards, reports, and MIS documentation.
• Work with third‑party vendors to improve vulnerability management processes.
• Monitor security intelligence feeds to identify emerging threats.
• Support compliance and IT control monitoring across the environment.

Required profile

• 7–10 years of overall IT experience with at least 5 years in vulnerability management, cybersecurity risk, and compliance monitoring.
• Willingness to provide 24×7 rotational support.
• Ability to work independently while collaborating with infrastructure, application, security, and compliance teams.
• Relevant certifications such as CISMA, CISSP, CISA, ISO 27001, CCNA/CCNP/CCSA are preferred.

Required skills

• Vulnerability Management and Assessment
• Vulnerability Scanning and Penetration Testing Analysis
• Vulnerability Remediation and Validation
• Cybersecurity Risk Management
• Security Compliance Monitoring (SOX, PCI DSS, HIPAA, NERC, CIP, DPA, ISO 27001, NIST, COBIT, ITIL)
• Cloud Security
• Networking & Systems Administration
• Security Automation
• IT Controls & Governance
• Security Dashboards & Reporting
• Risk‑Based Security Controls
• Third‑Party/Vendor Management