Lead Consultant - Cybersecurity Remediation Engineer

AstraZeneca; Guadalajara; Híbrido; MXN 30,000 - 90,000; Jornada completa

Descripción de la vacante

Una empresa líder en el sector farmacéutico busca un Consultor de Ciberseguridad para unirse a su equipo. En esta emocionante posición, serás responsable de analizar hallazgos de pruebas de penetración y colaborar con expertos en tecnología para implementar soluciones efectivas que mitiguen riesgos. Tu enfoque analítico y habilidades de comunicación serán clave para asegurar que las estrategias de remediación se alineen con los estándares de seguridad de la industria. Si estás listo para marcar la diferencia en un entorno dinámico y diverso, esta es tu oportunidad para contribuir a un programa de gestión de riesgos innovador.

Formación

• Experiencia comprobada en análisis de riesgos y gestión de vulnerabilidades.
• Capacidad para trabajar con equipos de TI para diseñar soluciones de remediación.

Responsabilidades

• Analizar hallazgos de pruebas de penetración y realizar análisis de causa raíz.
• Colaborar con expertos para desarrollar soluciones de remediación efectivas.

Conocimientos

Análisis de riesgos

Gestión de vulnerabilidades

Análisis de resultados de pruebas de penetración

Resolución de problemas

Comunicación efectiva

Educación

Licenciatura en Informática o campo relacionado

Herramientas

Herramientas de pruebas de penetración

Power BI

Tableau

Excel

AWS

Azure

GCP

Descripción del empleo

Job Title: Lead Consultant - Cybersecurity Remediation Engineer
Location: Guadalajara, Jalisco
Work Scheme: Hybrid

Introduction to the Role

We are seeking a detail-oriented and analytical Risk Remediation Engineer to join our growing team. In this critical role, you will analyze findings from penetration tests and other security assessments, conduct thorough root cause analyses, and drive the remediation process. Collaborating closely with subject matter experts (SMEs) across various technology teams, you will identify and implement effective steps to address technical risks. Furthermore, you will contribute to the ongoing enhancement of our risk management program by tracking metrics, key performance indicators (KPIs), and reporting on remediation progress.

Accountabilities

1. Findings Analysis & Root Cause Analysis: Review penetration test findings, dissect vulnerabilities, and conduct root cause analyses to comprehend underlying issues. Identify the most effective remediation steps for each vulnerability.
2. Collaboration with SMEs: Partner with SMEs from IT teams (e.g., network, development, infrastructure, applications, cloud, SaaS, security) to develop and implement remediation solutions addressing identified risks.
3. Remediation Solutioning & Deployment: Architect, design, and deploy risk remediation solutions based on analysis, ensuring alignment with organizational security requirements and best practices.
4. Risk Mitigation & Trade-off Analysis: Assess and evaluate alternative solutions, considering trade-offs related to risk, cost, implementation time, and business impact.
5. Continuous Program Improvement: Aid in evolving the risk remediation program by tracking key metrics and KPIs. Document and report on remediation efforts to ensure program improvement.
6. Compliance & Reporting: Ensure remediation activities comply with industry standards, regulations, and best practices (e.g., NIST, ISO). Produce detailed stakeholder reports on remediation progress and outcomes.
7. Stakeholder Communication: Communicate risk findings, remediation strategies, and status updates effectively to technical and non-technical stakeholders across the organization.

Essential Skills/Experience

1. Technical depth to understand findings, identify root causes, and design remediations.
2. Proven experience in risk analysis, vulnerability management, and/or IT security.
3. Strong experience in penetration test result analysis and root cause identification.
4. Familiarity with common penetration testing tools and techniques.
5. Ability to work cross-functionally with IT teams to design and implement remediation solutions.
6. Strong problem-solving skills with the ability to develop actionable remediation strategies.
7. Experience in risk assessment, mitigation, and management, with knowledge of risk management frameworks and best practices.
8. Proficiency in documenting metrics, KPIs, and remediation progress for continuous program improvement.
9. Knowledge of security standards and frameworks (e.g., NIST, ISO, SOC 2).
10. Strong communication skills, both written and verbal, to explain technical issues to non-technical stakeholders.

Desirable Skills/Experience

1. Experience with attack chains and ability to quantify risk based on other security controls.
2. Experience with security tools and technologies.
3. Familiarity with cloud environments and security practices (AWS, Azure, GCP).
4. Experience in automation and scripting.
5. Expertise in data analytics or reporting tools (e.g., Power BI, Tableau, Excel).

Date Posted: 21-abr-2025
Closing Date: 20-jun-2025

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.