Senior GRC Specialist - Mexico City

About the role

Airwallex, the AI-native financial operating system used by more than 675,000 businesses, is hiring a Senior GRC Specialist for its Mexico City region. Acting as the regional anchor and reporting to the Senior GRC Manager, you will integrate closely with the global Information Security team and serve as the regional point of contact for government and regulatory bodies in Mexico, helping design policies that balance regional requirements with global standards. You will work from the Mexico City or San Francisco office three days a week.

Key responsibilities

• Manage and monitor security controls, continuously refining and iterating them.
• Serve as a trusted contact for Mexican regulatory bodies, customers, partners and vendors, shaping their understanding of Airwallex's security posture.
• Use AI and automation to streamline compliance and security work, including reporting and communications.
• Develop and maintain security documentation: standards, policies, reporting metrics, dashboards and evidence artefacts.
• Act as a subject matter expert and generalist for security compliance in the Mexico region, balancing strategic ownership with hands-on work.
• Drive initiatives independently, using project management experience.

Required profile

• 5-7 years of cybersecurity experience, able to work and execute independently.
• Must hold a Mexican Tax ID (RFC) or have dual Mexican citizenship, as the role represents the Mexico City region.
• Fluent in written and spoken English and Spanish.
• Experience implementing and monitoring security controls, and maintaining security documentation.
• Preferred: fintech experience, knowledge of security compliance in finance or Mexico/LATAM, understanding of payments, and experience applying AI and automation to compliance and security operations.

Required skills

• Deep knowledge of compliance frameworks such as PCI-DSS, ISO 27001 and SOC 2, and of information security audits.
• Working knowledge of policy creation and maintenance, and of complex cloud environments.
• Preferred: an industry-leading security degree or certification (e.g. CISSP, CEH, CISA).