Mr. Compliance Account Manager

Delta Protect

At Delta Protect we make Cybersecurity and Compliance accessible, automated and actionable for companies throughout Latin America. We accompany our clients in certifications such as ISO 27001, PCI DSS, SOC 2, HIPAA, integrating Pentesting, Threat Detection, Cyber Intelligence and 24/7 Security Operations with a technical, human and business approach.

From Micro-enterprises, to unicorns 🦄 we believe that Cybersecurity and Compliance is for everyone.

Our Impact

• +300 companies trust us 🔒.
• +500 successful projects delivered ⚙️
• +15K endpoints monitored in real time 📡
• +1K critical vulnerabilities detected and corrected 💪
• +1M of exposed data detected on the dark web 👁️
• +7 countries with protected customers 🌎
• +6 years transforming cybersecurity in LATAM 🚀.

Why join Delta?

Cyberattacks have increased by more than 400% since the 🦠 pandemic, and companies are the main target. Our purpose is clear: to protect LATAM's business fabric from the next cyber pandemic... and we want you to be part of the team building this defense. 🌎

What do we offer you?

• 🧠 High Performance Team: you will learn more in 3 months than in 1 year elsewhere .
• 1200 USD for personal development
• 🩺 Major and minor medical insurance
• 💻 Hardware included
• 🚗 Transportation with Uber for face-to-face activities.
• 🏝️ Flexible, results-oriented vacations
• 🏡 Hybrid work
• ✅ Culture in pursuit of excellence, results-oriented.

How does the process work?

1. Apply in our application form 📩
2. If your profile fits, you'll get an initial screening call 🤝
3. We will send you a technical or practical challenge ⚙️
4. You will present your solution to the area leader in a video call💡
5. You will have a session with the Head of People to assess cultural fit 🧩
6. Finally, you will talk to the founders of Delta Protect 🚀.

About the Role

The Compliance Account Manager will serve as the primary security and compliance consultant for our strategic clients. This leader will not only oversee the execution of compliance programs, but will also develop and customize security frameworks to meet each client's specific needs, integrating advanced security solutions into existing platforms and systems.

Your Main Challenges

1. Multidomain Strategy and Consulting

• Custom Framework Design: Develop and adapt security strategies that cohesively integrate service management standards (ISO 20000 / ITIL v4), advanced cybersecurity (ISO 27032 / NIST), and privacy (GDPR / LFPDPPP).
• Artificial Intelligence Governance: Lead the implementation of controls for the ethical and secure management of AI systems, aligned with the ISO/IEC 42001 standard.
• Executive Consulting: Act as the strategic point of contact for clients' senior management, translating technical requirements into informed business decisions.

2. Leadership in Auditing and Assurance

• Certification and Attestation Cycle: Lead the preparation and support for certification audits (ISO 27001, 22301) and SOC 1 and SOC 2 (Type I and II) attestation processes, ensuring that controls operate with the required effectiveness.
• IT Quality Management: Overseeing that security service delivery complies with ITIL v4 and ISO 20000 standards, ensuring a cycle of continuous improvement and exceptional service levels (SLAs).

3. Comprehensive Risk Management and Resilience

• Advanced Methodologies: Develop and implement risk management methodologies ranging from the identification of threats in cyberspace (ISO 27032) to business continuity (ISO 22301).
• Mitigation Strategy: Collaborate with CISOs to design dynamic risk matrices, prioritizing mitigation plans based on the financial and operational impact on the customer.

4. Cybersecurity Operations and Response

• Cyber resilience: Coordinate incident response, ensuring that action plans not only restore operations but also follow cloud security protocols (CSA) and proactive defense best practices.
• GRC Automation: Drive the use of automation tools for monitoring controls, reducing operational burden and improving real-time compliance visibility.

5. Safety Culture and Academy

• Specialized Training: Lead awareness programs that include emerging trends (deepfakes, AI security, targeted attacks) and coordinate high-impact crisis simulations.
• Delta Academy: Promote Delta Protect's internal alignment with the ISMS, ensuring that the internal team is the first benchmark for excellence in compliance.

What you need to be successful

• Experience: +7 years leading Information Security or GRC Consulting areas.
• Regulatory Expertise: Deep understanding of ISO 27001, ISO 22301, NIST, and SOC 2.
• Specific Knowledge:
  • Service and Quality Management: ITIL v4 and ISO 20000.
  • Cybersecurity and New Technologies: ISO 27032 and ISO 42001 (IA).
  • Legal Compliance: LFPDPPP and GDPR.
• Advanced certifications in security and compliance (CISSP, CISA, CISM, ISO 27001 Lead Auditor and Implementer)
• Technical Skills: Familiarity with cloud security (AWS, GCP, Azure) and project management tools such as Asana and Slack.
• Excellent leadership and communication skills, and ability to influence and negotiate at the executive level.

Necessary/ Desirable Certifications

• ISO 27001 Lead Auditor and Lead Implementer to conduct and guide certification audits. (Essential).
• CISM (Certified Information Security Manager) for the management of information security programs (desirable).

‍