Security Engineer

• Maintain and enhance the ISMS, ensuring processes are documented, monitored, and continuously improved.
• Develop, review, and maintain security policies, standards, and procedures (including technical standards such as IAM, Logging, Cloud Security, and SDLC) in collaboration with engineering and operations teams.
• Participate in technical security discussions (e.g., logging, cloud controls, IAM, PAM, endpoint security) to ensure governance requirements are realistic and enforceable.
• Review proposed technical designs or projects for alignment with security policies and standards.
• Coordinate with GRC during internal and external audits by preparing evidence, ensuring timely responses, and tracking corrective actions to closure.
• Support Enterprise Risk Management (ERM) activities by contributing to risk assessments, risk treatment planning, and monitoring mitigation progress.
• Develop and deliver governance and policy-related training to business units, functional leaders, and technical teams.
• Translate technical requirements into control language that auditors and business leaders can understand.
• Provide input into governance metrics by maintaining dashboards, contributing data points, and preparing summaries for management and stakeholders.
• Contribute to supplier and third-party governance activities by ensuring minimum security requirements are addressed in procurement processes.
• Engage directly with customers to support the development or enhancement of their security governance programs, ensuring alignment with recognized frameworks and Syntax practices.

Security Governance Specialist

Cybersecurity Consultant

Senior Engineer, Cloud Security

Consultor de Seguridad IAM

Consultor de Seguridad