Security Consultant (vCISO Mexico Based)

We are growing our Security Advisory practice and are looking for a highly experienced Security Consultant (vCISO) to join our award-winning team.

Join DYOPATH – A Great Place to Work 5 Years in a Row!

At DYOPATH, we’re proud to be recognized year after year as a Great Place to Work. We simplify technology for our clients while investing deeply in our people, because we believe exceptional outcomes start with exceptional teams.

About the Role: Security Consultant (vCISO)

This is not a traditional “behind-the-scenes” security role. As a Security Consultant (vCISO), you will operate as a trusted advisor to executive teams, guiding organizations through complex cybersecurity challenges while also rolling up your sleeves to help build and execute their security programs.

Role Details

• Title: Security Consultant (vCISO Services)
• Location: Remote
• Schedule: Monday–Friday, standard business hours
• Availability: Occasional after-hours support for escalations
• Travel: Limited, international travel (primarily to the United States) based on client and leadership needs)
• English Requirement: Advanced (Professional proficiency required)
• Compensation: $500,000 – $550,000 MXN annually + performance-based bonus

This role blends:

• Executive-level strategy and influence
• Hands-on program development and execution
• Client relationship leadership and growth

You will play a critical role in shaping both our clients’ security posture and the evolution of DYOPATH’s security advisory services.

What You’ll Own (Your Mission)

You will serve as the primary security advisor for client organizations, helping them understand risk, make informed decisions, and build resilient security programs aligned to business goals.

Key Responsibilities

• Develop and lead enterprise security strategies, roadmaps, and governance frameworks
• Translate technical risk into business and financial impact for executive and board-level audiences
• Lead incident response planning, tabletop exercises, and breach investigations
• Conduct risk assessments and maturity evaluations aligned to NIST, CIS, ISO, and other frameworks
• Build and mature security programs, policies, and compliance initiatives
• Establish and guide vendor risk and third-party risk programs
• Deliver regular executive reporting on security posture, risk trends, and program progress
• Partner with IT, architecture, and business leaders to embed security into operations
• Support client growth and service expansion, including executive conversations and advisory engagements
• Stay ahead of emerging threats, technologies, and regulatory requirements

What Success Looks Like

We believe clarity drives success. In this role, you will be expected to:

First 90 Days

• Build strong relationships with client stakeholders and internal teams
• Assess current security posture and identify key risks

6–12 Months

• Deliver and execute a prioritized security roadmap
• Establish a consistent executive reporting cadence
• Demonstrate measurable improvement in security maturity and risk reduction
• Position DYOPATH as a trusted long-term security partner

Initial focus will be on a key enterprise client engagement, with the opportunity to expand across multiple clients over time. You will play a pivotal role in both stabilizing and growing the client relationship. Over time, you may manage multiple client engagements, requiring strong prioritization and adaptability.

This role is intentionally designed to blend Strategic advisory (executive engagement, roadmap planning, governance) and Hands-on execution (assessments, program development, incident response planning). You’ll be expected to operate comfortably at both levels, delivering value in the boardroom and in the details.

Why This Opportunity Stands Out

• Executive-Level Impact
• Build & Shape the Practice