InfoSec Remediation Lead: GVM & EXP/RP Risk

EY; Ciudad de México; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

EY Talent Operate is seeking an InfoSec EXP/RP & GVM Remediation Lead to own end-to-end remediation of vulnerabilities, risk exceptions, and compliance findings across Talent applications in Mexico City. You will partner with Product Owners, Infrastructure, and Security teams to ensure timely risk mitigation and audit readiness.

Responsibilities include tracking GVM findings, managing security exceptions lifecycle, developing dashboards, and driving governance progress to reduce security risk

Qualifications

• Experience in vulnerability management, risk remediation, and security governance.
• Experience managing GVM findings, remediation plans, and risk acceptance.
• Strong stakeholder management across Product, Application, Infrastructure, Vendor, and Security teams.
• Excellent analytical, prioritization, and risk management capabilities.
• Experience developing dashboards and remediation metrics.
• Strong communication and presentation skills for leadership and audits.

Responsibilities

• Own and drive the remediation of InfoSec findings, GVM vulnerabilities, and security risks across Talent applications.
• Review, triage, prioritize, assign, and track GVM vulnerabilities through resolution.
• Coordinate remediation activities with Application Leads, Product Owners, Infrastructure teams, vendors, and InfoSec stakeholders.
• Manage the complete lifecycle of Security Exceptions (EXP) and Risk Profiles (RP), including submission, review, approval, renewal, and closure.
• Monitor aging vulnerabilities, exceptions, and remediation plans; elevate overdue items and critical risks to leadership.
• Maintain remediation trackers, security documentation, audit evidence, and compliance records.
• Facilitate regular governance reviews to track remediation progress, open risks, and compliance obligations.
• Develop and maintain dashboards, metrics, and executive reporting for GVM, EXP, RP, and remediation activities.
• Support security and compliance assessments related to infrastructure upgrades, application changes, and environment refresh activities.
• Drive continuous improvement initiatives to reduce recurring vulnerabilities and strengthen the Talent security posture.
• Ensure adherence to EY security policies, standards, regulatory requirements, and audit expectations.

Skills

Vulnerability management

Risk remediation

Security governance

GVM findings remediation

Stakeholder management

Dashboards & reporting

Communication & presentation

Multitask across global teams

Tools

Vulnerability management tools

Security reporting platforms

Job description

EY Talent Operate is seeking an InfoSec EXP/RP & GVM Remediation Lead to own end-to-end remediation of vulnerabilities, risk exceptions, and compliance findings across Talent applications in Mexico City. You will partner with Product Owners, Infrastructure, and Security teams to ensure timely risk mitigation and audit readiness.

Responsibilities include tracking GVM findings, managing security exceptions lifecycle, developing dashboards, and driving governance progress to reduce security risk