a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }
Location: Monterrey, Mexico City, Guadalajara, or Querétaro (Hybrid - 3 days per week at Infosys Office)Security Risk Assessment & Risk Management ConsultantWe are seeking an experienced Security Risk Assessment & Risk Management professional to lead complex security assessments and risk management activities across assigned business areas, technologies, and initiatives.
The ideal candidate will serve as a subject matter expert within assigned domains, translating security risks into business impact and supporting risk-informed decision-making. This individual will work closely with business, technology, compliance, privacy, quality, audit, and security stakeholders while balancing security, compliance, operational resilience, and business enablement.
The role requires the ability to operate independently while remaining focused on assigned programs, platforms, or business functions.
Key Responsibilities- Lead complex risk assessments, audits, security evaluations, and control reviews across assigned programs, technologies, or business areas.
- Evaluate risk scenarios, control gaps, and remediation options, providing recommendations aligned with business objectives and regulatory expectations.
- Partner with business, technology, compliance, privacy, quality, audit, and security stakeholders to develop and track risk mitigation plans.
- Review and challenge risk assessments, exception requests, remediation plans, and security decisions within the assigned scope.
- Monitor compliance with security policies, standards, and procedures, and provide guidance on remediation and control improvement activities.
- Support significant incidents, investigations, and remediation efforts by assessing risk and recommending corrective actions.
- Prepare and present risk findings, recommendations, and status updates to management using clear, business-relevant language.
- Mentor team members and promote consistency, quality, and repeatability across security assessment work products.
- Improve assessment documentation, methodologies, templates, reporting, and workflows through standardization and continuous improvement.
Required Skills and Experience- 7+ years of relevant experience in security, risk, compliance, audit, technology, or a regulated industry.
- Strong experience conducting complex security risk assessments, audits, security evaluations, and control reviews.
- Experience evaluating security risks, control gaps, remediation options, and risk mitigation plans.
- Experience reviewing and challenging risk assessments, exception requests, remediation plans, and security decisions.
- Strong understanding of security policies, standards, procedures, and control improvement activities.
- Experience supporting security incidents, investigations, and remediation efforts from a risk assessment perspective.
- Ability to translate security risks and findings into business impact and business-relevant recommendations.
- Experience collaborating across business, technology, compliance, privacy, quality, audit, and security functions.
- Ability to operate independently and manage security assessment activities across assigned programs, platforms, or business functions.
- Experience preparing and presenting risk findings, recommendations, and status updates to management.
- Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Risk Management, Quality, Compliance, or a related discipline.
Nice to Have Skills- Advanced degree in a relevant discipline.
- Relevant security, risk, compliance, or audit certifications.
- Experience working in regulated industry environments.
- Experience improving and standardizing security assessment methodologies, documentation, templates, reporting, and workflows.
- Experience mentoring team members and promoting consistent and repeatable assessment practices.
Desired Skills and Qualities- Strong security risk assessment and analytical skills.
- Ability to translate technical and security risks into meaningful business impact.
- Strong judgment when evaluating risks, controls, remediation options, and security decisions.
- Ability to work independently within assigned programs, platforms, or business functions.
- Strong cross-functional collaboration skills.
- Ability to communicate effectively with business, technology, compliance, privacy, quality, audit, security, and management stakeholders.
- Strong focus on quality, consistency, and repeatability of assessment work products.
- Continuous improvement mindset with an emphasis on standardization and effective risk management.
a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }
