InfoSec Remediation Lead – GVM, EXP/RP & Risk Governance

EY; Buenos Aires; Presencial; ARS 135.892.000 - 196.289.000; Jornada completa

Descripción de la vacante

EY Talent Operate is seeking an InfoSec Remediation Lead to drive end-to-end remediation of security vulnerabilities and compliance findings across Talent applications. You will partner with Product Owners, Infrastructure, and security teams to ensure timely mitigation and audit readiness.

The role focuses on managing GVM findings, security exceptions, risk profiles, and governance reporting to reduce overall security risk exposure for Talent applications.

Formación

• Experience with vulnerability management, remediation, and risk governance.
• Proven ability to manage GVM findings, remediation plans, and risk acceptance.
• Excellent stakeholder management and cross-functional coordination.
• Strong analytical, prioritization, and risk management capabilities.
• Experience developing dashboards and remediation metrics.
• Clear communication and presentation skills for leadership and audits.

Responsabilidades

• Own and drive remediation of InfoSec findings, GVM vulnerabilities, and security risks across Talent applications.
• Review, triage, prioritize, assign, and track GVM vulnerabilities through resolution.
• Coordinate remediation activities with Application Leads, Product Owners, Infrastructure teams, vendors, and InfoSec stakeholders.
• Manage lifecycle of Security Exceptions (EXP) and Risk Profiles (RP), including submission, review, renewal, and closure.
• Monitor aging vulnerabilities, exceptions, and remediation plans; elevate overdue items and critical risks.
• Maintain remediation trackers, security documentation, audit evidence, and compliance records.
• Facilitate governance reviews to track remediation progress, risks, and compliance obligations.
• Develop dashboards, metrics, and executive reporting for GVM, EXP, RP, and remediation activities.
• Support security and compliance assessments related to infrastructure upgrades and environment refreshes.
• Drive continuous improvement to reduce recurring vulnerabilities and strengthen security posture.
• Ensure adherence to EY security policies, standards, regulatory requirements, and audit expectations.

Conocimientos

Vulnerability management

Risk remediation

Security governance processes

Stakeholder management

Dashboards & reporting

Communication & presentation

Prioritization & risk

Herramientas

GVM tools

Security reporting platforms

Descripción del empleo

EY Talent Operate is seeking an InfoSec Remediation Lead to drive end-to-end remediation of security vulnerabilities and compliance findings across Talent applications. You will partner with Product Owners, Infrastructure, and security teams to ensure timely mitigation and audit readiness.

The role focuses on managing GVM findings, security exceptions, risk profiles, and governance reporting to reduce overall security risk exposure for Talent applications.