Main purpose
ensure protection, detection, response, and resilience against evolving cyber threats—including ai-driven attacks, supply chain compromises, and identity-based intrusions—while validating security controls. Coordinate volunteer management and support emergency services during incidents. Define and continuously refine information security methodologies, covering ai governance, information classification, security measures, iam with zero trust, and post-quantum readiness. Drive a proactive, intelligence-led cybersecurity program aligned with enterprise risk management and global regulatory standards.
main responsibilities
* threat intelligence: coordinate external forensic and simulation services, define ai-driven threat modeling strategies, analyze intelligence reports (including deepfakes and social engineering), and implement actions focused on emerging threats and geopolitical risks.
* security monitoring: develop and update detection/containment strategies with ai/ml analytics, manage vendor risk, oversee playbook implementation, analyze threat assessments, escalate validated incidents, and measure kpis with automated ai dashboards.
* vulnerability management: oversee third-party vulnerability scans, analyze results, enforce compliance, enhance patch management programs (prioritizing zero-days and ai/ml vulnerabilities), optimize platforms, and integrate with supply chain risk management and sbom practices.
* incident response & forensics: coordinate escalation, response, and communication during incidents; provide operational security reports to top management; review playbooks, collect and classify evidence; implement lessons learned and corrective actions; oversee external forensic services; analyze forensic reports; and enhance playbooks for advanced scenarios such as ransomware multi‐extortion, ai‐driven attacks, identity‐based intrusions, and forensic analysis of ai systems.
* cybersecurity governance, resilience & ai oversight: drive zero trust architecture adoption and improvement; manage supply chain and third‐party risks including ai model supply chains; promote resilience beyond recovery to ensure business continuity under attack; and oversee ethical ai use, including defenses against prompt injection, data poisoning, and agentic ai security risks.
skills and abilities
* bachelor's (or equivalent) in information security, computer science, management of information systems or related field.
* full professional proficiency in english and spanish.
* 7+ years of multi-disciplinary information security or information technology experience.
* strong understanding of nist csf 2.0, iso 27001, cis controls, zero trust, and supply chain frameworks.
* detailed understanding of offensive cybersecurity ttps, including ai-augmented attacks.
* broad knowledge of holistic programs, with emphasis on cloud security, identity/access management, and emerging threats.
* experience in security vendor contracts, rfps, and legal processes.
* strong problem-solving, customer service, and project management (budget, scheduling, resources).
* cloud security expertise (aws/azure/gcp), zero trust, and hybrid environment management.
* willingness to travel; on-call availability for incidents.
at sigma, we promote uniqueness. We recognize and celebrate the unique value of people, promoting equal opportunities without discriminating based on political affiliation, culture, age, pregnancy, marital status, gender, nationality, socioeconomic level, maternity, paternity, religion, sexual orientation, ethnic origin, or type of disability.
join our community of more than 60 nationalities in four regions!