Senior Security Risk & Compliance Consultant

Infosys; Monterrey; Hybrid; MXN 800,000 - 1,200,000; Full time

Job summary

Infosys is seeking an experienced Security Risk Assessment & Risk Management professional to lead complex security assessments and risk management activities across assigned business areas, technologies, and initiatives. Hybrid work arrangement includes 3 days per week at Infosys offices in Monterrey and other Mexican locations.

The ideal candidate will translate security risks into business impact, partnering with business, technology, compliance, privacy, quality, audit, and security

Qualifications

• 7+ years of experience in security, risk, compliance, audit, or a regulated industry.
• Experience leading complex security risk assessments, audits, security evaluations, and control reviews.
• Ability to translate risk findings into business impact and recommendations.

Responsibilities

• Lead complex risk assessments, audits, security evaluations, and control reviews across assigned programs, technologies, or business areas.
• Evaluate risk scenarios, control gaps, and remediation options, providing recommendations aligned with business objectives and regulatory expectations.
• Partner with business, technology, compliance, privacy, quality, audit, and security stakeholders to develop and track risk mitigation plans.
• Review and challenge risk assessments, exception requests, remediation plans, and security decisions within the assigned scope.
• Monitor compliance with security policies, standards, and procedures, and provide guidance on remediation and control improvement activities.
• Support significant incidents, investigations, and remediation efforts by assessing risk and recommending corrective actions.
• Prepare and present risk findings, recommendations, and status updates to management using clear, business‑relevant language.
• Mentor team members and promote consistency, quality, and repeatability across security assessment work products.
• Improve assessment documentation, methodologies, templates, reporting, and workflows through standardization and continuous improvement.

Skills

Security risk assessment

Risk management

Audit

Compliance

Stakeholder collaboration

Education

Bachelor's degree in Information Security

Job description

Infosys is seeking an experienced Security Risk Assessment & Risk Management professional to lead complex security assessments and risk management activities across assigned business areas, technologies, and initiatives. Hybrid work arrangement includes 3 days per week at Infosys offices in Monterrey and other Mexican locations.

The ideal candidate will translate security risks into business impact, partnering with business, technology, compliance, privacy, quality, audit, and security