At Viva, we look for passionate individuals who truly love what they do. Now is the perfect time to join our team!
Viva is the lowest-cost, most preferred, fun, and profitable airline in the Americas, operating the youngest fleet in Latin America and ranking among the fastest-growing airlines worldwide. We foster a culture of inclusion, passion, and transparency—breaking traditional norms, redefining the way we work, and committing to excellence in service and passenger safety.
As our
SGSI Internal Control Manager, you will be responsible for designing, implementing, and maintaining the Information Security Management System (ISMS) and related control frameworks — including ITGC, AFAC, and Finance/IT — ensuring compliance with international ISO/IEC 2700X standards. This role strengthens the second line of defense and directly contributes to risk management, safeguarding information, operational continuity, and regulatory compliance across Viva.
Your Responsibilities Will Include
- Internal Control Framework Design & Maintenance: Define, document, and maintain ISMS policies, procedures, and controls aligned with ISO/IEC 2700X standards, ensuring continuous updates
- Technology & Information Risk Management: Identify, assess, and prioritize information security and technology risks, proposing effective mitigation plans
- Audits & Compliance: Coordinate internal and external audits (ISO, ITGC, SOX), ensuring second-line independence and the implementation of corrective actions
- Cross-Functional Collaboration: Work closely with IT, Finance, Compliance, Internal Audit, and Legal to ensure comprehensive, consistent information security management
- Governance & Certifications: Lead certification processes (ISO 27001, ISO 27005, among others) and ensure compliance with national and international regulatory frameworks
- Team Management & Technical Leadership: Coordinate and develop the ISMS internal control team, fostering a culture of accountability, continuous learning, and operational excellence
Our ideal candidate:
- Bachelor's degree in Systems Engineering, Computer Science, Industrial Administration, or a related field
- Master's degree in Information Security, IT, Risk, or Audit (desirable)
- Required certifications: ISO/IEC 27001 Lead Auditor and CISA (Certified Information Systems Auditor)
- Desirable certifications: CIA, CISM, CISSP, CRISC, or cloud security/data protection certifications
- 7+ years of experience in information security, IT audit, or internal control
- Proven experience implementing and maintaining certified systems (ISO 27001)
- Experience in regulated industries (aviation, financial, telecommunications, or energy)
- Practical knowledge of COSO, ISO 27000/01/02/05/17/18, ISO 31000, COBIT, ITIL, NIST
- Experience leading teams and cross-functional projects with senior leadership
- Strong systems audit and internal control skills, policy design and version control management, SAP and IT control frameworks, technology and regulatory risk management, and effective communication and technical writing in both English and Spanish
Benefits You Will Enjoy as #TeamViva
- Flexible schedule
- #TheBestAirlineToWork: An incredible work environment
- Unlimited vacation from day one
- Savings fund & savings account
- Staff Travel: Discounted flights for you and up to 12 loved ones after 6 months
- MyIDTravel: Fly worldwide with 30+ airline alliances at reduced fares after 6 months
- Life & medical insurance + 24/7 online family medical assistance
- Exclusive discounts on gyms, retail stores, restaurants, universities, and more
- Above-the-law benefits
Viva is an equal opportunity employer. All qualified applicants will receive consideration without discrimination of any kind. All candidate information will be handled confidentially and in compliance with Mexican data-protection regulations. Your data will be used only for recruitment-related purposes.
Le dejé los hashtags de ejemplo ( / ) que usaste la última vez — cámbialos si aplican otros para esta posición. ¿Todo bien así o le ajusto algo?
