Compliance Account Manager
Delta Protect
At Delta Protect we simplify and automate Cybersecurity and Compliance for startups and SMEs in Mexico and Latam, automating certifications such as ISO 27001, PCI DSS, SOC 2, HIPAA accompanied by Pentesting, Vulnerability Analysis and Cyber Intelligence. 🚀
From Micro-enterprises, to unicorns 🦄 we believe that Cybersecurity and Compliance is for everyone.
- + More than 200 companies trust us 🔒.
- + 15 industries we love to work with 🤝
- + 7 countries where our customers are located 🌎
- + 900 critical vulnerabilities detected and corrected 💪
- + 1M of exposed data detected in the Dark Web 👁
Why join the team?
Since the pandemic began, cyber-attacks have increased by 400%, resulting in high economic losses for several companies in multiple industries, but the most affected today are SMEs and startups in Latam. 🌎
Therefore, we aim to restore privacy and digital security to Latin American companies and protect them from the next cyberpandemic. 🦠
More reasons why you need to apply with us
- High performance team 💪
- $1200 USD for your personal development 💰
- Major and minor medical expense insurance 🩺
- Hardware provided by us 💻
- Transportation with Uber 🚗
- Flexible, results-oriented vacations 🏝️
- Hybrid work 🏡
- Results-oriented company ✅
How does the process work?
- Apply in our application form 📩
- In case your profile matches the vacancy, we will have a video call to get to know each other🤝.
- Once the video call is over, you will receive a challenge ⚙️.
- We would have a video call for you to explain how you solved the challenge 💡
- Interview with the founders of Delta Protect 🚀.
About the Role
The Compliance Account Manager (CAM) will be responsible for the execution and improvement of our clients' risk and compliance program, ensuring they comply with international cybersecurity standards and/or regulatory standards. This role involves implementing ongoing compliance tools, aligning them with our Apollo platform, and managing cybersecurity compliance programs for a variety of clients, such as: ISO 27001, ISO 27701, PCI-DSS, and NIST, and regulatory for organizations according to their segment, personal data protection, which can range from small businesses to complex international organizations. The SAM will maintain an exhaustive risk register, ensuring that the necessary follow-up and corrective measures are implemented. In addition, this role is key to accompany the client on its path towards certification, regulatory compliance, and maintenance of security standards, offering a comprehensive and adaptable consulting service.
Your Main Challenges
- Develop and maintain an information security strategy in alignment with international standards, industry-specific regulations and best practices.
- Provide guidance and lead the accompaniment of the client during the certification and ongoing compliance process.
- Manage relationships with multiple clients across multiple industries, understanding their specific security and compliance needs.
- Keep up-to-date with the latest regulations, threats and best practices in information security, proposing improvements and proactive mitigations.
- Collaborate with other internal teams for the integration of security into business processes, ensuring the incorporation of policies, procedures, standards, etc. as regulatory requirements into products and services.
- Conduct internal audits, risk assessments and review of security controls to identify gaps and recommend practical and scalable solutions.
What you need to be successful
- Necessary Technical Experience:
- Minimum of 3 years of experience in information security, with solid exposure in implementing security controls and risk assessment.
- Hands-on experience in implementing compliance programs and in-depth knowledge of regulations such as ISO 27001, ISO 27002, ISO 27005, NIST, PCI-DSS, and CSA.
- Advanced knowledge in security risk management and methodologies for risk identification, mitigation and remediation.
- Knowledge of security controls applied to on-premise platforms or infrastructures, including security practices in multi-cloud environments.
- Here I also believe that there are still customers who manage a hybrid or on-premise infrastructure.
- Proficient in the use and configuration of GRC (Governance, Risk, and Compliance) tools and experience in development or automation for compliance management.
- Experience in conducting Business Impact Analysis for the definition of Business Continuity Plans, Disaster Recovery Plans and/or Operational Contingency Plans for industries of different segments.
- Key Skills:
- Exceptional communication skills to interact effectively with technical and non-technical stakeholders and customers at all levels.
- Leadership ability to guide and manage certification and compliance projects, and lead internal audits and safety assessments.
- Ability to work result oriented, with high organizational skills to meet deadlines and handle multiple projects simultaneously.
- Critical thinking and problem solving skills to adapt to specific customer needs and propose scalable and practical solutions.
- Proactivity in the constant updating of safety regulations and standards, with a continuous improvement mentality.
- Collaborate effectively with internal teams to deliver a comprehensive service in line with customer service objectives and that adds value to the service.
Necessary/ Desirable Certifications
- ISO 27001 Lead Auditor and Lead Implementer to conduct and guide certification audits (Required).
- CISM (Certified Information Security Manager) for the management of information security programs (desirable).