Talent Ops SME/SMR - Global Vulnerability Management

About the role

EY is looking for a Talent Ops SME/SMR for Global Vulnerability Management (GVM) in Buenos Aires. The role leads the organization's vulnerability management program, covering assessment, prioritization and remediation of security vulnerabilities across on-premises, cloud, application, database and network environments. It provides strategic oversight, governance, stakeholder management and executive reporting to strengthen the cybersecurity posture and reduce technology risk.

Key responsibilities

• With the AMS Lead, define vulnerability management strategy, policies, standards and procedures aligned with risk appetite
• Lead and coordinate end-to-end vulnerability management activities across enterprise systems
• Set up governance frameworks, remediation SLAs and performance metrics
• Partner with infrastructure, cloud, application development, operations and security teams to ensure timely remediation
• Prioritize vulnerabilities by risk, severity, exploitability and business impact, and monitor remediation progress against SLAs
• Report the vulnerability risk posture and remediation progress to senior leadership and governance committees
• Support internal and external audits, ensure compliance with cybersecurity policies and standards, and coordinate exception management and risk acceptance
• Act as escalation point for critical and high-risk vulnerabilities, with 24/7 on-call support
• Work in a corporate IT environment using ITIL, with daily collaboration with EY ITSD, the AMS Lead, the TCS AMS team and the Infosec team

Required profile

• Degree in Computer Science or a business-related degree, or equivalent work experience
• 10+ years in a corporate IT environment, including 5+ years in an operational/support service management role under ITIL
• 5+ years in security compliance and vulnerability remediation for infra including web/app servers, DB servers and cloud
• Preferred: professional services industry experience
• Fluent English and excellent English communication skills
• Minimal travel may be required

Required skills

• Vulnerability management and cybersecurity principles, CVSS scoring, CVE and risk assessment
• .NET applications, Microsoft Azure, SQL/Oracle databases, network, cloud and application security
• ITIL and ServiceNow
• Project management basics (scope, schedule, resources, costs)
• Certifications such as ITIL, BPM, SAP SuccessFactors RCM/RMK/Onboarding are a plus