Information Security - Exp/Rp & Gvm Remediation Lead - Ey Gds

Ey; Xico; On-site; MXN 480,000 - 620,000; Full time

Job summary

EY is seeking a Talent InfoSec EXP/RP & GVM Remediation Lead to drive end-to-end remediation of security vulnerabilities, risk exceptions, and compliance findings across Talent applications. You will partner with Product Owners, Application Leads, Infrastructure, and vendor teams to ensure timely risk mitigation and audit readiness.

The role requires coordinating remediation activities, managing security exceptions and risk profiles, developing governance dashboards, and delivering executive

Qualifications

• Strong vulnerability management and risk remediation experience.
• Experience with GVM findings and risk acceptance processes.
• Excellent stakeholder management across multiple teams.
• Strong analytical and reporting abilities.
• Experience presenting to leadership and audit forums.
• Ability to drive multiple remediation initiatives globally.

Responsibilities

• Own remediation of InfoSec findings and GVM vulnerabilities.
• Review and triage GVM findings through resolution.
• Coordinate remediation with stakeholders and vendors.
• Manage Security Exceptions (EXP) and Risk Profiles (RP).
• Monitor aging vulnerabilities and escalate risks.
• Maintain remediation trackers and audit evidence.
• Facilitate governance reviews and executive reporting.
• Develop dashboards and metrics for remediation activities.
• Support assessments during infrastructure upgrades and environment refreshes.
• Drive continuous improvement to reduce recurring vulnerabilities.
• Ensure adherence to EY security policies and audit expectations.

Skills

Vulnerability management

Risk remediation

Security governance

GVM findings

Stakeholder management

Dashboards & reporting

Communication skills

GVM tooling

Tools

GVM (Greenbone)

Job description

Talent Operate – InfoSec EXP/RP & GVM Remediation Lead

Role Overview

The InfoSec EXP/RP & GVM Remediation Lead is responsible for driving the end-to-end remediation of security vulnerabilities, risk exceptions, and compliance findings across Talent applications. This role partners with Product Owners, Application Leads, Infrastructure, InfoSec, and vendor teams to ensure timely risk mitigation, governance compliance, audit readiness, and reduction of overall security risk exposure.

Key Responsibilities

• Own and drive the remediation of InfoSec findings, GVM vulnerabilities, and security risks across Talent applications.
• Review, triage, prioritize, assign, and track GVM vulnerabilities through resolution.
• Coordinate remediation activities with Application Leads, Product Owners, Infrastructure teams, vendors, and InfoSec stakeholders.
• Manage the complete lifecycle of Security Exceptions (EXP) and Risk Profiles (RP), including submission, review, approval, renewal, and closure.
• Monitor aging vulnerabilities, exceptions, and remediation plans; escalale overdue items and critical risks to leadership.
• Maintain remediation trackers, security documentation, audit evidence, and compliance records.
• Facilitate regular governance reviews to track remediation progress, open risks, and compliance obligations.
• Develop and maintain dashboards, metrics, and executive reporting for GVM, EXP, RP, and remediation activities.
• Support security and compliance assessments related to infrastructure upgrades, application changes, and environment refresh activities.
• Drive continuous improvement initiatives to reduce recurring vulnerabilities and strengthen the Talent security posture.
• Ensure adherence to EY security policies, standards, regulatory requirements, and audit expectations.

Required Skills

• Strong understanding of vulnerability management, risk remediation, and security governance processes.
• Experience managing GVM findings, remediation plans, security exceptions, and risk acceptance processes.
• Excellent stakeholder management skills with the ability to coordinate across Product, Application, Infrastructure, Vendor, and Security teams.
• Strong analytical, prioritization, and risk management capabilities.
• Experience developing and maintaining dashboards, reporting, and remediation metrics.
• Strong communication and presentation skills for leadership, audit, and governance forums.
• Ability to manage multiple remediation initiatives and competing priorities across global teams.

Preferred Qualifications

• Experience working within enterprise security, compliance, or risk management programs.
• Familiarity with EY security standards, audit requirements, and governance processes.
• Knowledge of vulnerability management tools and security reporting platforms.
• Experience supporting infrastructure refreshes, application upgrades, and security compliance initiatives.
• Security-related certifications (, Security+, CISSP, CISM, CRISC, ISO 27001) preferred.

Key Success Measures

• Reduction in overdue GVM vulnerabilities and EXP/RP items.
• Achievement of remediation SLA and compliance targets.
• Timely approval, renewal, and closure of security exceptions.
• Accurate reporting, audit readiness, and governance compliance.
• Improved visibility of security risks and remediation progress.Reduction in overall security risk exposure across Talent applications.