InfoSec GVM & EXP/RP Remediation Lead

Ey; Xico; On-site; MXN 480,000 - 620,000; Full time

Job summary

EY is seeking a Talent InfoSec EXP/RP & GVM Remediation Lead to drive end-to-end remediation of security vulnerabilities, risk exceptions, and compliance findings across Talent applications. You will partner with Product Owners, Application Leads, Infrastructure, and vendor teams to ensure timely risk mitigation and audit readiness.

The role requires coordinating remediation activities, managing security exceptions and risk profiles, developing governance dashboards, and delivering executive

Qualifications

• Strong vulnerability management and risk remediation experience.
• Experience with GVM findings and risk acceptance processes.
• Excellent stakeholder management across multiple teams.
• Strong analytical and reporting abilities.
• Experience presenting to leadership and audit forums.
• Ability to drive multiple remediation initiatives globally.

Responsibilities

• Own remediation of InfoSec findings and GVM vulnerabilities.
• Review and triage GVM findings through resolution.
• Coordinate remediation with stakeholders and vendors.
• Manage Security Exceptions (EXP) and Risk Profiles (RP).
• Monitor aging vulnerabilities and escalate risks.
• Maintain remediation trackers and audit evidence.
• Facilitate governance reviews and executive reporting.
• Develop dashboards and metrics for remediation activities.
• Support assessments during infrastructure upgrades and environment refreshes.
• Drive continuous improvement to reduce recurring vulnerabilities.
• Ensure adherence to EY security policies and audit expectations.

Skills

Vulnerability management

Risk remediation

Security governance

GVM findings

Stakeholder management

Dashboards & reporting

Communication skills

GVM tooling

Tools

GVM (Greenbone)

Job description

EY is seeking a Talent InfoSec EXP/RP & GVM Remediation Lead to drive end-to-end remediation of security vulnerabilities, risk exceptions, and compliance findings across Talent applications. You will partner with Product Owners, Application Leads, Infrastructure, and vendor teams to ensure timely risk mitigation and audit readiness.

The role requires coordinating remediation activities, managing security exceptions and risk profiles, developing governance dashboards, and delivering executive