InfoSec Remediation Lead: GVM & EXP/RP

EY; Ciudad de México; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

EY is seeking an experienced InfoSec Remediation Lead to drive end-to-end remediation of vulnerabilities, risk exceptions, and compliance findings across Talent applications. The role collaborates with Product Owners, Infrastructure, and vendor teams to ensure timely risk mitigation and audit readiness.

Responsibilities include triaging GVM findings, coordinating with multiple stakeholders, and maintaining remediation trackers, dashboards, and governance reports.

Formación

• Experience managing vulnerability findings and remediation plans.
• Ability to coordinate across multiple security, product, and infrastructure teams.
• Proven track record in governance, audits, and compliance.

Responsabilidades

• Own remediation of InfoSec findings and GVM vulnerabilities across Talent apps.
• Triage, prioritize, assign, and track vulnerabilities to resolution.
• Coordinate remediation with Product Owners, Infrastructure, and vendors.
• Manage lifecycle of security exceptions (EXP) and risk profiles (RP).
• Develop dashboards and executive reports for remediation metrics.
• Support audit readiness and governance reviews.

Conocimientos

Vulnerability management

Risk remediation

Security governance

Stakeholder management

Dashboards & reporting

Communication & presentation

Risk prioritization

Cross-functional coordination

Educación

Bachelor's degree in a related field

Security certifications (CISSP/CISM/CISSP-ISSAP)

Herramientas

GVM

Descripción del empleo

EY is seeking an experienced InfoSec Remediation Lead to drive end-to-end remediation of vulnerabilities, risk exceptions, and compliance findings across Talent applications. The role collaborates with Product Owners, Infrastructure, and vendor teams to ensure timely risk mitigation and audit readiness.

Responsibilities include triaging GVM findings, coordinating with multiple stakeholders, and maintaining remediation trackers, dashboards, and governance reports.