Senior Regional Security Governance & Risk Analyst at Dentsu in Buenos Aires

Job description

At dentsu, we are committed to protecting our clients’ brands and data, therefore information security is at the forefront of our business. Job Description: As a Senior Regional Security Governance & Risk Analyst on the Americas Security team, you'll play a pivotal role in maintaining a security governance and risk program that supports our information security management system, certification initiatives, policy implementation, and risk and exception management. You'll collaborate with regional and global stakeholders to coordinate risk assessments, maintain regional inputs to the global security risk register, evaluate control effectiveness, and drive agreed remediation and security improvement actions. You'll also maintain compliance obligations and supporting evidence, helping translate security requirements into practical business processes that protect information confidentiality, integrity, and availability. Led by the Americas Region BISO, our Americas Region Security team is responsible for security initiatives across the Americas Region and supporting dentsu’s clients and brands. If you're a proactive, detail-oriented professional with a passion for cybersecurity and a desire to make a meaningful impact, we encourage you to apply and be part of our mission to protect what matters most Responsibilities Build positive relationships with regional and global stakeholders, partnering with business, risk, and control owners to embed security governance requirements and progress agreed actions. Coordinate risk remediation activities supporting the information security management system, working with action owners to address findings from incidents, root cause analyses, audits, and risk assessments. Assess and report on the design and operating effectiveness of security controls, documenting supporting evidence, control gaps, and recommended improvements for risk and control owners. Actively contribute to security training initiatives to increase employee awareness Coordinate the regional security exception process, documenting business justification, risk assessments, compensating controls, required approvals, and review or expiry dates in line with the defined process. Coordinate information security risk assessments using the defined information security risk management process, ensuring relevant stakeholders provide inputs and agreed assessments are completed within established timeframes. Assess risks for in-scope platforms across the Americas. Maintain regional risk records and their corresponding entries in the global security risk register, keeping risk descriptions, owners, assessments, treatment plans, and status updates accurate and current in coordination with global risk stakeholders. Coordinate regional activities supporting security certification initiatives and audits, maintaining assessment schedules, organizing evidence, and tracking findings and agreed corrective actions. Maintain the regional security improvement plan, tracking action owners, milestones, and agreed target dates; validate completion evidence and escalate overdue actions or delivery barriers through the appropriate governance channels. Partner with business and technology stakeholders to review and improve internal processes and systems, addressing security risks and dependencies identified through business impact assessments and data protection impact assessments to protect information confidentiality, integrity, and availability. Define and maintain a regional record of applicable security compliance obligations, mapping each obligation to relevant controls, evidence requirements, and evidence owners to demonstrate alignment. Document and regularly review governance, risk assessment, risk treatment, and exception procedures, keeping regional practices aligned with the defined global security governance and risk management processes. Drive continuous improvement in regional security governance and risk management by identifying recurring c