Cloud Information Security & Compliance Specialist

Siemens Digital Industries Software; Ciudad de México; Hybrid; MXN 900,000 - 1,400,000; Full time

Job summary

Siemens Digital Industries Software is seeking an experienced Information Security Specialist to own cloud security, risk management, and compliance across cloud-hosted products and services. You will work with global teams and external auditors to implement robust assurance controls and drive continuous improvement, reporting risk status to leadership.

This individual contributor role reports into Cloud Services, with hybrid work by default.

Qualifications

• 8-10 years of hands-on information security experience in cloud environments.
• Lead Auditor certification on ISO 27001.
• Expert knowledge of ISO 27001 and SOC 2 compliance.
• Experience with cloud security architecture and controls.

Responsibilities

• Identify and evaluate information security requirements for cloud operations based on standards (ISO 27001, ISO 27017, ISO 27018, ISO 27002, SOC 2, ISO 42001, TISAX, GDPR, ITAR)
• Advise teams on security and assurance controls for cloud-hosted products and services, including infrastructure, networks, firewalls, coding practices, and operational tools
• Conduct hands-on audits and reviews of information security controls across cloud environments and identify security risks and compliance gaps
• Develop, author, and improve information security processes and policies to ensure relevance, compliance, and team adoption
• Review implementation of security controls and provide recommendations for remediation and improvement
• Serve as the primary technical contact between cloud operations teams and external auditing organizations
• Maintain audit evidence databases and documentation to support compliance verification and reporting
• Report on security assurance metrics, audit results, and risk status to management and stakeholders
• Lead initiatives to address identified security gaps, evaluating multiple approaches and their trade-offs
• Ensure end-to-end adoption of information security standards across business processes and cloud operations

Skills

Cloud security

ISO 27001

SOC 2

English proficiency

Auditing

Job description

Siemens Digital Industries Software is seeking an experienced Information Security Specialist to own cloud security, risk management, and compliance across cloud-hosted products and services. You will work with global teams and external auditors to implement robust assurance controls and drive continuous improvement, reporting risk status to leadership.

This individual contributor role reports into Cloud Services, with hybrid work by default.