Security Architect

We are looking for an experienced OneTrust Security and Governance Specialist with a minimum of 7 years of experience to join a dynamic team within a leading organization. This role involves implementing and operating the OneTrust platform as the policy and evidence layer of an enterprise data governance program, with a focus on data discovery, privacy, compliance, security, and governance.

Key Responsibilities:

Implement and configure OneTrust modules according to privacy and compliance programs.

Onboard data sources, define scan scope and cadence, and tune data classification.

Build and maintain data maps and Records of Processing Activities (RoPA).

Configure data policies, monitor violations, and drive remediation to closure.

Coordinate the application of data controls such as masking, filtering, encryption, and access restrictions.

Configure and operate assessment, DSAR, incident, consent, and privacy workflows.

Implement control frameworks and evidence collection for audits and certifications.

Design and maintain integrations with the surrounding ecosystem, particularly Informatica.

Translate regulatory and policy requirements into OneTrust platform configurations.

Provide L2 and L3 support, troubleshooting scan, integration, workflow, and permission issues.

Technical Skills Required:

With over 7 years of experience as a OneTrust Security and Governance Specialist, you must be proficient in the following technical skills:

OneTrust, Data Discovery, and Data Governance.

OneTrust Data Use Governance and Control Enforcement.

Privacy Automation, RoPA, PIA, DPIA, TIA, DSAR, Incident and Breach Management, and Consent Management.

Risk & Compliance frameworks including ISO 27001, ISO 27701, SOC 2, and NIST CSF.

OneTrust REST APIs and webhooks for automation and integrations.

Experience integrating OneTrust with Informatica catalogs.

Knowledge of AWS data environments including S3, Redshift, RDS, and Oracle.

Knowledge of Denodo and data virtualization layers.

Experience with ITSM and collaboration tools such as ServiceNow, Jira, Slack, or Teams.

Working knowledge of GDPR, CCPA, CPRA, LGPD, privacy by design, and data minimization.

Knowledge of data protection techniques including classification, masking, tokenization, encryption, RBAC, and ABAC.

SQL and basic Python or scripting for validation, reconciliation, and automation.

Qualifications:

Bachelor’s degree or higher.

Working proficiency in English and Spanish, written and spoken.

Excellent communication, empathy, commitment, leadership, and teamwork skills.

OneTrust platform certifications are desirable.

IAPP CIPP/E, CIPP/US, CIPM, or CIPT certifications are desirable.

ISO 27001 Lead Implementer or Lead Auditor certification is desirable.

Location & Schedule:

Remote work from Mexico City, Mexico.

Work hours Monday to Friday, 09:00 – 18:00.

English and Spanish skills are required.

Benefits:

Attractive Salary + Premium Benefits
Performance bonuses, grocery coupons, and savings are found.
Aguinaldo, premium vacations, and vacations paid
SGMM Medical insurance, family, and Life insurance.

Candidates must include their compensation expectations in their applications and resumes in English.

Interested? Apply now through this link:

Originally posted on Himalayas