Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Location: CABA
Other locations: Primary Location Only
Date: 3 Sept 2026

Requisition ID: 1739656

Talent Operate – Info Sec EXP/RP & GVM Remediation Lead

Role Overview

The Info Sec EXP/RP & GVM Remediation Lead is responsible for driving the end-to-end remediation of security vulnerabilities, risk exceptions, and compliance findings across Talent applications. This role partners with Product Owners, Application Leads, Infrastructure, Info Sec, and vendor teams to ensure timely risk mitigation, governance compliance, audit readiness, and reduction of overall security risk exposure.

Key Responsibilities

Own and drive the remediation of Info Sec findings, GVM vulnerabilities, and security risks across Talent applications.

Review, triage, prioritize, assign, and track GVM vulnerabilities through resolution.

Coordinate remediation activities with Application Leads, Product Owners, Infrastructure teams, vendors, and Info Sec stakeholders.

Manage the complete lifecycle of Security Exceptions (EXP) and Risk Profiles (RP), including submission, review, approval, renewal, and closure.

Monitor aging vulnerabilities, exceptions, and remediation plans; elevate overdue items and critical risks to leadership.

Maintain remediation trackers, security documentation, audit evidence, and compliance records.

Facilitate regular governance reviews to track remediation progress, open risks, and compliance obligations.

Develop and maintain dashboards, metrics, and executive reporting for GVM, EXP, RP, and remediation activities.

Support security and compliance assessments related to infrastructure upgrades, application changes, and environment refresh activities.

Drive continuous improvement initiatives to reduce recurring vulnerabilities and strengthen the Talent security posture.

Ensure adherence to EY security policies, standards, regulatory requirements, and audit expectations.

Required Skills

Strong understanding of vulnerability management,



risk remediation, and security governance processes.

Experience managing GVM findings, remediation plans, security exceptions, and risk acceptance processes.

Excellent stakeholder management skills with the ability to coordinate across Product, Application, Infrastructure, Vendor, and Security teams.

Strong analytical, prioritization, and risk management capabilities.

Experience developing and maintaining dashboards, reporting, and remediation metrics.

Strong communication and presentation skills for leadership, audit, and governance forums.

Ability to manage multiple remediation initiatives and competing priorities across global teams.

Preferred Qualifications

Experience working within enterprise security, compliance, or risk management programs.

Familiarity with EY security standards, audit requirements, and governance processes.

Knowledge of vulnerability management tools and security reporting platforms.

Experience supporting infrastructure refreshes, application upgrades, and security compliance initiatives.

Security-related certifications (e.g., Security+, CISSP, CISM, CRISC, ISO 27001) preferred.

Key Success Measures

Reduction in overdue GVM vulnerabilities and EXP/RP items.

Achievement of remediation SLA and compliance targets.

Timely approval, renewal, and closure of security exceptions.

Accurate reporting, audit readiness, and governance compliance.

Improved visibility of security risks and remediation progress.

Reduction in overall security risk exposure across Talent applications.

EY refers to the integral organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

"route" is used for session stickiness

"career Site Company Id" is used to send the request to the correct data centre

"JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor

Linked In

#J-18808-Ljbffr

📌 Talent Operate - InfoSec EXP/RP & GVM Remediation Lead - EY GDS (Buenos Aires)
🏢 Ernst & Young Advisory Services Sdn Bhd
📍 Buenos Aires