Information Security Analyst

Tata Consultancy Services; Región Centro; Presencial; MXN 90.000 - 120.000; Jornada completa

Descripción de la vacante

Tata Consultancy Services seeks an experienced Information Security Analyst to lead the security function for LATAM operations, ensuring the implementation of security standards, regulatory compliance, risk management, and incident response across multiple locations.

The successful candidate will serve as a trusted security advisor to business, delivery, and support teams, embedding information security into daily operations and supporting audits, awareness programs, and third-party assessments.

Formación

• Bachelor’s degree in IT, CS or cybersecurity required.
• 2–4 years of information security, governance, risk and compliance (GRC) or related experience.
• Experience with ISO 27001:2022 frameworks and controls.
• Advanced English communication skills (written and spoken).

Responsabilidades

• Drive implementation and adherence to corporate information security policies, standards, and procedures across LATAM locations.
• Ensure compliance with ISO 27001:2022 and other regulatory requirements.
• Deliver security awareness programs and training sessions for all employees.
• Coordinate risk assessments and ensure they are maintained by delivery and support teams.
• Manage information security incidents from detection to remediation and closure.
• Conduct physical security assessments for new client engagements and setups.
• Monitor and enforce system and network security requirements.
• Support audits (internal, client, certification) and third-party assessments.
• Partner with stakeholders to continuously improve the organization’s security posture.

Conocimientos

English (Advanced)

GRC

Incident Response

Risk Management

Educación

Bachelor's Degree in Information Technology

Bachelor's Degree in Computer Science

Diploma in Cybersecurity

Descripción del empleo

We are seeking an experienced Information Security Analyst to lead and strengthen our Information Security function across LATAM operations. This role will be responsible for ensuring the implementation of security standards, regulatory compliance, risk management, security awareness, audit coordination, and incident response across multiple locations.

The successful candidate will act as a trusted security advisor to business, delivery, and support teams, ensuring information security is embedded into day-to-day operations.

Key Responsibilities

• Drive the implementation and adherence to corporate Information Security policies, standards, and procedures across LATAM locations.
• Ensure compliance with ISO 27001:2022 Information Security Management System requirements.
• Deliver security awareness programs, training sessions, and compliance campaigns for all employees.
• Ensure risk assessments are conducted and maintained by delivery and support teams.
• Manage information security incidents from identification through investigation, evidence collection, reporting, remediation, and closure.
• Conduct physical security assessments and work area reviews for new client engagements and operational setups.
• Monitor and ensure compliance with system and network security requirements.
• Support compliance with international regulations and industry standards, including:
• PCI DSS
• GLBA
• HIPAA
• Data Protection Regulations
• Other applicable legal and regulatory requirements
• Prepare and present monthly security metrics and reports to senior leadership.
• Plan and execute internal security audits.
• Support client, certification, and external audits.
• Conduct third-party and vendor security assessments as required.
• Partner with business stakeholders to continuously improve the organization's security posture.

Required Qualifications

• Bachelor's Degree or Diploma in:
• Information Technology
• Computer Science
• Cybersecurity
• Minimum 2-4 years of experience in Information Security, Governance, Risk, and Compliance (GRC), Audit, or related functions.
• Experience working with ISO 27001:2022 frameworks and controls.
• Advanced English communication skills, both written and verbal.

Required Knowledge & Experience

• Strong understanding of Information Security principles and best practices.
• Knowledge of IT infrastructure, networks, and security controls.
• Experience managing security incidents and risk assessments.
• Experience supporting internal and external audits.
• Understanding of regulatory and compliance requirements, such as:
• HIPAA
• PCI DSS
• GLBA
• Data Protection regulations
• Other international compliance frameworks

Preferred Certifications

Candidates holding one or more of the following certifications will be highly preferred:

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• Excellent verbal and written communication skills
• Strong analytical and problem-solving abilities
• Report writing and documentation expertise
• Detail-oriented and process-driven mindset
• Strong stakeholder management and interpersonal skills
• Self-motivated with the ability to work independently
• Adaptability and willingness to embrace new challenges
• High level of integrity and professionalism