Digital@FEMSA is the fintech division of FEMSA Group, which delivers innovative digital financial solutions designed to simplify and enhance everyday life. Our ecosystem includes solutions like Spin by OXXO, Spin Premia, OXXO Pay, and NetPay, which provide reliable financial solutions for both individuals and businesses. Backed by FEMSA's 130 years of excellence, we aim to generate economic and social value in the digital financial space.
General Objective of the role: Support the implementation and ongoing maintenance of cybersecurity policies, procedures, and controls to ensure compliance with current regulations and industry best practices within the financial entity.
Main responsibilities:
- Conduct risk analyses and assessments of suppliers servicing the entity.
- Document and maintain security policies, procedures, and manuals.
- Oversee security audit processes, including planning, execution, and findings resolution.
- Monitor audit findings to ensure effective and timely corrective actions.
- Coordinate phishing campaigns and cybersecurity training to improve employee awareness and behavior.
- Evaluate and adjust awareness programs as needed.
- Support daily security operations and compliance with regulatory requirements (e.g., CNBV, Banxico, PCI DSS).
- Provide support in ongoing security projects.
Role Requirements:
- Education: Bachelor’s in Systems Engineering, IT, Industrial Engineering, or related field.
- Experience: Minimum of 2 years in a similar role within finance or fintech.
- Knowledge: Strong understanding of applicable cybersecurity standards and regulations (e.g., ISO 27001, PCI-DSS, Fintech Law, CUB, SPEI).
- Communication Skills: Ability to clearly convey security gaps and solutions to technical and non-technical audiences.
- Analytical Skills: Proficient in analyzing data, implementing security controls, and effectively managing risks.
- Advanced English
Digital FEMSA está comprometida con un lugar de trabajo diverso e inclusivo.
Somos un empleador que ofrece igualdad de oportunidades y no discrimina por motivos de raza, origen nacional, género, identidad de género, orientación sexual, discapacidad, edad u otra condición legalmente protegida.
Si desea solicitar una adaptación, notifique a su Reclutador.