We are seeking an experienced Information Security Manager to lead and strengthen our Information Security function across LATAM operations. This role will be responsible for ensuring the implementation of security standards, regulatory compliance, risk management, security awareness, audit coordination, and incident response across multiple locations.

The successful candidate will act as a trusted security advisor to business, delivery, and support teams, ensuring information security is embedded into day-to-day operations.

Key Responsibilities

- Drive the implementation and adherence to corporate Information Security policies, standards, and procedures across LATAM locations.
- Ensure compliance with ISO 27001:2022 Information Security Management System requirements.
- Deliver security awareness programs, training sessions, and compliance campaigns for all employees.
- Ensure risk assessments are conducted and maintained by delivery and support teams.
- Manage information security incidents from identification through investigation, evidence collection, reporting, remediation, and closure.
- Conduct physical security assessments and work area reviews for new client engagements and operational setups.
- Monitor and ensure compliance with system and network security requirements.
- Support compliance with international regulations and industry standards, including:
- PCI DSS
- GLBA
- HIPAA
- Data Protection Regulations
- Other applicable legal and regulatory requirements
- Prepare and present monthly security metrics and reports to senior leadership.
- Plan and execute internal security audits.
- Support client, certification, and external audits.




- Conduct third-party and vendor security assessments as required.
- Partner with business stakeholders to continuously improve the organization's security posture.

Required Qualifications

- Bachelor's Degree or Diploma in:
- Information Technology
- Computer Science
- Cybersecurity
- Minimum 2-4 years of experience in Information Security, Governance, Risk, and Compliance (GRC), Audit, or related functions.
- Experience working with ISO 27001:2022 frameworks and controls.
- Advanced English communication skills, both written and verbal.

Required Knowledge & Experience

- Strong understanding of Information Security principles and best practices.
- Knowledge of IT infrastructure, networks, and security controls.
- Experience managing security incidents and risk assessments.
- Experience supporting internal and external audits.
- Understanding of regulatory and compliance requirements, such as:
- HIPAA
- PCI DSS
- GLBA
- Data Protection regulations
- Other international compliance frameworks

Preferred Certifications

Candidates holding one or more of the following certifications will be highly preferred:

- CISSP (Certified Information Systems Security Professional)
- CISA (Certified Information Systems Auditor)
- CISM (Certified Information Security Manager)
- Excellent verbal and written communication skills
- Strong analytical and problem-solving abilities
- Report writing and documentation expertise
- Detail-oriented and process-driven mindset
- Strong stakeholder management and interpersonal skills
- Self-motivated with the ability to work independently
- Adaptability and willingness to embrace new challenges
- High level of integrity and professionalism

#J-18808-Ljbffr

📌 Information Security Manager (Centro)
🏢 Tata Consultancy Services
📍 Centro