SGSI Internal Control Manager

SGSI Internal Control Manager Buscamos talento que quiera dejar huella. Enviar solicitud At Viva, we look for passionate individuals who truly love what they do. Now is the perfect time to join our team! Viva is the lowest-cost, most preferred, fun, and profitable airline in the Americas, operating the youngest fleet in Latin America and ranking among the fastest-growing airlines worldwide. We foster a culture of inclusion, passion, and transparency—breaking traditional norms, redefining the way we work, and committing to excellence in service and passenger safety. As our SGSI Internal Control Manager , you will be responsible for designing, implementing, and maintaining the Information Security Management System (ISMS) and related control frameworks — including ITGC, AFAC, and Finance/IT — ensuring compliance with international ISO/IEC 2700X standards. This role strengthens the second line of defense and directly contributes to risk management, safeguarding information, operational continuity, and regulatory compliance across Viva. Your responsibilities will include: Internal Control Framework Design & Maintenance: Define, document, and maintain ISMS policies, procedures, and controls aligned with ISO/IEC 2700X standards, ensuring continuous updates Technology & Information Risk Management: Identify, assess, and prioritize information security and technology risks, proposing effective mitigation plans Audits & Compliance: Coordinate internal and external audits (ISO, ITGC, SOX), ensuring second-line independence and the implementation of corrective actions Cross-Functional Collaboration: Work closely with IT, Finance, Compliance, Internal Audit, and Legal to ensure comprehensive, consistent information security management Governance & Certifications: Lead certification processes (ISO 27001, ISO 27005, among others) and ensure compliance with national and international regulatory frameworks Team Management & Technical Leadership: Coordinate and develop the ISMS internal control team, fostering a culture of accountability, continuous learning, and operational excellence Our ideal candidate: Bachelor's degree in Systems Engineering, Computer Science, Industrial Administration, or a related field Master's degree in Information Security, IT, Risk, or Audit (desirable) Required certifications: ISO/IEC 27001 Lead Auditor and CISA (Certified Information Systems Auditor) Desirable certifications: CIA, CISM, CISSP, CRISC, or cloud security/data protection certifications 7+ years of experience in information security, IT audit, or internal control Proven experience implementing and maintaining certified systems (ISO 27001) Experience in regulated industries (aviation, financial, telecommunications, or energy) Practical knowledge of COSO, ISO 27000/01/02/05/17/18, ISO 31000, COBIT, ITIL, NIST Experience leading teams and cross-functional projects with senior leadership Strong systems audit and internal control skills, policy design and version control management, SAP and IT control frameworks, technology and regulatory risk management, and effective communication and technical writing in both English and Spanish Benefits You Will Enjoy as #TeamViva Flexible schedule #TheBestAirlineToWork: An incredible work environment Unlimited vacation from day one Savings fund & savings account Staff Travel: Discounted flights for you and up to 12 loved ones after 6 months MyIDTravel: Fly worldwide with 30+ airline alliances at reduced fares after 6 months Life & medical insurance + 24/7 online family medical assistance Exclusive discounts on gyms, retail stores, restaurants, universities, and more Above-the-law benefits Viva is an equal opportunity employer. All qualified applicants will receive consideration without discrimination of any kind. All candidate information will be handled confidentially and in compliance with Mexican data-protection regulations. Your data will be used only for recruitment-related purposes. #LI-PR1 #LI-HYBRID Le dejé los hashtags de ejemplo (#LI-PR1 / #LI-HYBRID) que usaste la última vez — cámbialos si aplican otros para esta posición. ¿Todo bien así o le ajusto algo? Ubicaciones MEX Estado remoto Híbrido