InfoSec Officer – Logical Security & Compliance

Thales; Torreón; Presencial; MXN 600.000 - 1.100.000; Jornada completa

Descripción de la vacante

Thales seeks an Information Security Officer to implement, monitor, and improve logical security controls across manufacturing and card personalization activities. You will protect production operations, data, and cryptographic assets, while ensuring audit readiness for PCI-CP and customer requirements.

The role covers risk identification, control development, incident escalation, access governance, change control, vulnerability management, and continuous improvement in security practices, in

Formación

• Bachelor’s degree in Information Security, Computer Science, IT, Engineering, or related field.
• 5 years in information security, IT security, compliance, audit, or secure manufacturing environments.
• Spanish fluent; English intermediate to advanced.

Responsabilidades

• Maintain Information Security Management System updated and aligned with policy and customer requirements.
• Identify, assess, document and monitor security risks impacting operations and data.
• Coordinate evidence preparation for PCI-CP and audits; ensure readiness and remediation.
• Review and close audit findings with action plans and evidence.
• Monitor vulnerability management and firewall governance with timely remediation.

Conocimientos

Information security

Risk assessment

Audit & compliance

Security governance

English communication

Educación

Bachelor’s degree in Information Security/IT/Engineering

Herramientas

Microsoft 365

SIEM

Access management tools

Vulnerability management

Firewall management

Descripción del empleo

Thales seeks an Information Security Officer to implement, monitor, and improve logical security controls across manufacturing and card personalization activities. You will protect production operations, data, and cryptographic assets, while ensuring audit readiness for PCI-CP and customer requirements.

The role covers risk identification, control development, incident escalation, access governance, change control, vulnerability management, and continuous improvement in security practices, in