Information Security Manager

Tata Consultancy Services; Región Centro; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Tata Consultancy Services is seeking an experienced Information Security Manager to strengthen our information security program across LATAM operations. You will drive policy adherence, risk assessment, and incident response while advising business and delivery teams to embed security into daily operations.

The role requires 2–4 years of information security experience, ISO 27001:2022 knowledge, and strong English communication. Relevant certifications are preferred.

Formación

• Bachelor’s degree or diploma in IT, CS or Cybersecurity.
• Advanced English communication skills, both written and verbal.
• 2–4 years of experience in Information Security, GRC, Audit or related functions.

Responsabilidades

• Drive implementation of information security policies, standards and procedures across LATAM locations.
• Ensure ISO 27001:2022 compliance across security management system requirements.
• Deliver security awareness programs and training sessions for all employees.
• Coordinate risk assessments and ensure proper incident response and remediation processes.
• Manage information security incidents from identification to closure and support audits.
• Conduct third-party and vendor security assessments as required.

Conocimientos

Advanced English communication

Educación

Bachelor’s degree or diploma in Information Technology/Computer Science/Cybersecurity

Descripción del empleo

We are seeking an experienced Information Security Manager to lead and strengthen our Information Security function across LATAM operations. This role will be responsible for ensuring the implementation of security standards, regulatory compliance, risk management, security awareness, audit coordination, and incident response across multiple locations.

The successful candidate will act as a trusted security advisor to business, delivery, and support teams, ensuring information security is embedded into day-to-day operations.

Key Responsibilities

• Drive the implementation and adherence to corporate Information Security policies, standards, and procedures across LATAM locations.
• Ensure compliance with ISO 27001:2022 Information Security Management System requirements.
• Deliver security awareness programs, training sessions, and compliance campaigns for all employees.
• Ensure risk assessments are conducted and maintained by delivery and support teams.
• Manage information security incidents from identification through investigation, evidence collection, reporting, remediation, and closure.
• Conduct physical security assessments and work area reviews for new client engagements and operational setups.
• Monitor and ensure compliance with system and network security requirements.
• Support compliance with international regulations and industry standards, including:
• PCI DSS
• GLBA
• HIPAA
• Data Protection Regulations
• Other applicable legal and regulatory requirements
• Prepare and present monthly security metrics and reports to senior leadership.
• Plan and execute internal security audits.
• Support client, certification, and external audits.
• Conduct third-party and vendor security assessments as required.
• Partner with business stakeholders to continuously improve the organization's security posture.

Required Qualifications

• Bachelor's Degree or Diploma in:
• Information Technology
• Computer Science
• Cybersecurity
• Minimum 2-4 years of experience in Information Security, Governance, Risk, and Compliance (GRC), Audit, or related functions.
• Experience working with ISO 27001:2022 frameworks and controls.
• Advanced English communication skills, both written and verbal.

Required Knowledge & Experience

• Strong understanding of Information Security principles and best practices.
• Knowledge of IT infrastructure, networks, and security controls.
• Experience managing security incidents and risk assessments.
• Experience supporting internal and external audits.
• Understanding of regulatory and compliance requirements, such as:
• HIPAA
• PCI DSS
• GLBA
• Data Protection regulations
• Other international compliance frameworks

Preferred Certifications

Candidates holding one or more of the following certifications will be highly preferred:

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• Excellent verbal and written communication skills
• Strong analytical and problem-solving abilities
• Report writing and documentation expertise
• Detail-oriented and process-driven mindset
• Strong stakeholder management and interpersonal skills
• Self-motivated with the ability to work independently
• Adaptability and willingness to embrace new challenges
• High level of integrity and professionalism