Levi Strauss

1 week ago

Cyber Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Implement the cyber risk operational strategy as part of the Cyber Risk & Strategy team. Manage the GRC program, run internal and third-party security risk assessments, and align programs to ISO 27005, CIS Top 18, and the NIST Cybersecurity Framework. Drive policy lifecycle management, control effectiveness, vendor tiering, exception handling in GRC tools, and risk remediation and continuous control monitoring outcomes.

Location: Mexico City

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Implement the cyber risk strategy and advise on opportunities for improvement.
•Manage the GRC program, including governance, risk, and compliance processes and escalation of strategic decisions to the risk manager.
•Perform internal and third-party security risk assessments, including vendor tiering and selecting controls based on risk assessment frameworks.
•Drive policy lifecycle management, exception processing in the GRC tool for GIS teams, and maintain procedures.
•Support risk mitigation/acceptance, risk analysis for top risks and critical assets, and manage risk remediation plans with reporting and continuous control monitoring using the GRC tool.

Key Requirements

•3+ years of experience in cybersecurity risk management, governance, and regulatory requirements focused on business outcomes and service delivery.
•3+ years performing internal and third-party security risk assessments.
•3+ years working with regulatory compliance and information security management frameworks such as ISO 27005, NIST Cybersecurity Framework, CIS Top 18, and MITRE ATT&CK.
•Experience with Governance, Risk, and Compliance (GRC) tools, preferably OneTrust and/or ServiceNow.
•Bachelor’s degree in Computer Science, Information Security, or a related field; security certifications (e.g., CISSP, CISM, CRISC) or aspiration to obtain within a year.

Experience:3+ yearsCybersecurityGRCRisk managementInformation security

Education:Bachelor's in Computer Science, Information Security or related field

Skills:Analytical thinkingProblem-solvingCommunicationRelationship managementProject management

Certifications:CISSPCISMCRISC

Tech Stack:ISO 27005CIS Top 18 ControlsNIST Cybersecurity FrameworkMITRE ATT&CKGRCGRC toolOneTrustServiceNowContinuous control monitoring (CCM)Risk remediationPolicy lifecycle management

Company Brief

Levi Strauss

Designs, markets, and sells denim and casual apparel under the Levi's, Dockers, and related brands. The company operates globally through wholesale, retail, and direct-to-consumer channels.

Industry: Fashion & Apparel

Company Size: Enterprise (1,001+ employees)

Revenue: USD 5M to 10M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1853

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Levi Strauss

1 week ago

Cyber Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: Mexico City

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Implement the cyber risk strategy and advise on opportunities for improvement.
•Manage the GRC program, including governance, risk, and compliance processes and escalation of strategic decisions to the risk manager.
•Perform internal and third-party security risk assessments, including vendor tiering and selecting controls based on risk assessment frameworks.
•Drive policy lifecycle management, exception processing in the GRC tool for GIS teams, and maintain procedures.
•Support risk mitigation/acceptance, risk analysis for top risks and critical assets, and manage risk remediation plans with reporting and continuous control monitoring using the GRC tool.

Key Requirements

•3+ years of experience in cybersecurity risk management, governance, and regulatory requirements focused on business outcomes and service delivery.
•3+ years performing internal and third-party security risk assessments.
•3+ years working with regulatory compliance and information security management frameworks such as ISO 27005, NIST Cybersecurity Framework, CIS Top 18, and MITRE ATT&CK.
•Experience with Governance, Risk, and Compliance (GRC) tools, preferably OneTrust and/or ServiceNow.
•Bachelor’s degree in Computer Science, Information Security, or a related field; security certifications (e.g., CISSP, CISM, CRISC) or aspiration to obtain within a year.

Experience:3+ yearsCybersecurityGRCRisk managementInformation security

Education:Bachelor's in Computer Science, Information Security or related field

Skills:Analytical thinkingProblem-solvingCommunicationRelationship managementProject management

Certifications:CISSPCISMCRISC

Tech Stack:ISO 27005CIS Top 18 ControlsNIST Cybersecurity FrameworkMITRE ATT&CKGRCGRC toolOneTrustServiceNowContinuous control monitoring (CCM)Risk remediationPolicy lifecycle management

Company Brief

Levi Strauss

Designs, markets, and sells denim and casual apparel under the Levi's, Dockers, and related brands. The company operates globally through wholesale, retail, and direct-to-consumer channels.

Industry: Fashion & Apparel

Company Size: Enterprise (1,001+ employees)

Revenue: USD 5M to 10M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1853

Website LinkedIn