Senior Regional Security Governance & Risk Analyst

About the role

dentsu is looking for a Senior Regional Security Governance & Risk Analyst for its Americas Security team in Buenos Aires. The role maintains a security governance and risk program that supports the information security management system, certification initiatives, policy implementation and risk and exception management. It works with regional and global stakeholders to coordinate risk assessments, keep regional inputs in the global security risk register, evaluate control effectiveness and drive remediation actions. The team is led by the Americas Region BISO.

Key responsibilities

• Build relationships with regional and global stakeholders and partners with business, risk and control owners to embed security governance requirements.
• Coordinate risk remediation, working with action owners on findings from incidents, root cause analyses, audits and risk assessments.
• Assess and report on the design and operating effectiveness of security controls, documenting evidence, gaps and improvements.
• Contribute to security training initiatives and coordinate the regional security exception process, including justifications, compensating controls and approval dates.
• Coordinate regional information security risk assessments and assess risks for in-scope platforms across the Americas.
• Maintain regional risk records and entries in the global security risk register, keeping them accurate and up to date.
• Support security certification initiatives and audits, maintaining schedules, evidence and corrective actions.
• Maintain the regional security improvement plan, tracking action owners, milestones and target dates, and escalating overdue actions.
• Review and improve internal processes based on business impact and data protection impact assessments.
• Maintain a regional record of compliance obligations mapped to controls and evidence, and review governance, risk assessment, treatment and exception procedures.
• Drive continuous improvement by identifying control gaps and risk trends and recommending risk-based improvements.

Required profile

• Demonstrated experience in information security governance and risk management, including supporting an information security management system.
• Practical experience applying risk assessment and treatment techniques, maintaining risk registers and documenting risk decisions and exceptions.
• Ability to work independently on complex governance and risk activities, prioritizing competing demands and managing assessments and remediation to completion.
• Strong stakeholder management and communication skills, able to turn complex technical findings into clear business-risk statements and governance reports.
• Self-motivated, proactive and able to develop knowledge within the information security community.
• Fluency in Spanish and English is required; Portuguese is highly desirable.

Desirable qualifications

• Experience with IT assurance and auditing techniques.
• Understanding of network architecture, protocols and principles.
• An achieved or in-progress information security qualification such as CISSP, CISM, CISA or CRISC.