Key tasks and responsibilities

• Support in planning the annual cybersecurity audit program
• Independent execution of audits on cybersecurity controls in accordance with the parent company’s (FEMSA) requirements
• Identification of control weaknesses and gaps, and development of remediation plans
• Assisting business units in enhancing the maturity of cybersecurity controls
• Support in the continuous improvement of the cybersecurity audit methodology
• Close collaboration with the internal audit function of the parent company
• Close collaboration with external auditors

Key skills / requirements

• Bachelor’s degree in IT or related fields, along with certifications such as CISA, CSISP, or CRMA
• Relevant professional experience in IT auditing or cybersecurity
• Experience in external auditing is a plus
• Knowledge of internal auditing standards, COSO, risk management, and business process improvement/consulting
• Experience with IT SOX 404 compliance is an advantage
• Excellent English and good German language skills 

What we offer