Consultant Infosec

Description

Job Summary: LATAM Information Security team seeks a professional to protect information assets, manage risks, and strengthen security controls while promoting a security culture. Key Highlights: 1. Protect information assets and manage security risks. 2. Collaborate on audits and strengthen operational resilience. 3. Promote best security practices within multidisciplinary teams. TransUnion's Job Applicant Privacy Notice **Team Overview** The LATAM Information Security team is responsible for protecting the organization’s information assets through risk management, strengthening of security controls, and compliance with regulatory and corporate standards. This team works cross-functionally with business and technology areas to promote a security culture that enables the organization’s secure growth. This position will report directly to\&\#xa;\&\#xa;This is a hybrid position and involves regular performance of job responsibilities virtually as well as in\-person at an assigned TU office location for a minimum of two days a week. **Role Overview And Core Responsibilities** * Support identification, assessment, monitoring, and mitigation of information security risks using recognized risk management methodologies. * Conduct risk assessments and maintain up-to-date risk registers to facilitate business decision-making. * Participate in security governance activities, policy management, and monitoring of regulatory and corporate compliance. * Collaborate on internal and external audits, as well as management and tracking of security findings. * Support vulnerability management processes, validation of remediations, and reviews of control effectiveness. * Develop metrics, dashboards, and risk reports for technical and business audiences. * Coordinate penetration testing activities and follow-up on derived action plans. * Work with multidisciplinary teams to promote security best practices and awareness. * Contribute to regional and global Information Security initiatives. Support implementation of security initiatives that strengthen operational resilience and organizational compliance. * **Required Knowledge And Experiences** * Professional degree in Information Security, Cybersecurity, Systems Engineering, Computer Science, or related fields. Equivalent experience may be accepted where applicable. * 3–5 years of professional experience in Information Security, Cybersecurity, Technology Risk Management, or related areas. * Experience supporting risk assessments, compliance programs, audits, or security governance initiatives in corporate environments. * Practical knowledge of frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, SOC 2, and PCI\-DSS for security control management and assessment. * Desired experience working with risk treatment plans, risk monitoring, finding tracking, and remediation processes. ### **Required Technical Skills** * Experience using Governance, Risk, and Compliance (GRC) platforms and tools. * Practical knowledge of OnSpring for risk and compliance management. * Experience with vulnerability and security management tools such as Rapid7\. * Knowledge of application security and protection solutions such as AppScan, Cloudflare, and BeyondTrust. * Familiarity with identity and access management platforms such as Ping Identity. * English proficiency at B2 level or higher to interact with regional and global teams. ### **Desired Skills** The following skills are also sought. Whether already mastered or under development, professional growth in these areas is supported: * Certifications or specialized training in ISO 27001, CRISC, CISA, CISM, or CISSP. * Graduate studies in Cybersecurity, Information Security, or related fields. * Knowledge of COBIT or other IT governance frameworks. * Leadership, influence, and stakeholder management skills in matrixed environments. * Strategic thinking, project management, and ability to drive continuous improvement initiatives. * Experience participating in regional or global Information Security initiatives. **\#LI\-GL1 \#LI\-Hybrid** **TransUnion Overview:** At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our **Workforce for Good**, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our **Workforce for Good** – you’ll work with great people, pioneering products and cutting\-edge technology. TransUnion Job Title Consultant, InfoSec Risk Management \& Governance