**About Oliver Wyman**
Oliver Wyman is a global leader in management consulting.
With offices in more than 70 cities across 30 countries, Oliver Wyman combines deep industry knowledge with specialized expertise in strategy, operations, risk management, and organization transformation.
The firm has more than 5,000 professionals around the world who work with clients to optimize their business, improve their operations, and risk profile, and accelerate their organizational performance to seize the most attractive opportunities.
Oliver Wyman's thought leadership is evident in our agenda-setting books, white papers, research reports, and articles in the business press.
Our clients are the CEOs and executive teams of the top Global 1000 companies.
Oliver Wyman is seeking to hire an ITS Security and Risk Manager to join the team in Mexico City.
This role will be based in our Mexico City office and report to Oliver Wyman's CISO.
**Key Responsibilities**:
- Manage Information Security functional areas (e.g., Application & Infrastructure Vulnerability Management, Technology Risk Assessments & Security Testing) and lead a team of security professionals
- Develop and implement procedures, processes, or programs to assess, prioritize, and mitigate business risk with technical and non-technical controls
- Provide oversight, coordination, and management of Security & Risk projects
- Provides expertise for cyber security technical and non-technical solutions; reviews and provide guidance enabling business system delivery in a manner that adheres to information security policy
- Provide support to strategic initiatives, programs, and projects by identifying information security risks, collaborating with project teams on determining and implementing mitigating controls, tracking timely remediation of issues
- Partner with ITS managers with assigned tasks on specific Information Security initiatives, such as security program and controls
- Identify and recommend opportunities to enhance processes, policies, and systems; monitor changes in business, technology, and threat landscape to identify and develop strategies for addressing new risks to the company
- Implement vulnerability management and penetration test requirements, coordinate penetration tests and vulnerability assessments with internal teams
- Provides assistance in the engineering, documentation, and implementation of comprehensive information security solutions to include; process mapping, technical diagrams and schematics, standard operating procedures, and technical infrastructure documentation.
- Report information security related statistics to Global Information Security for consolidation; ensures Key Risk Indicators are provided correctly to stakeholders
- Attract and retain talent through recruitment and personal growth
- Support OWG CISO on improving overall service and solutions across the firm
**Experience**:
- Minimum of 5 years of experience in Information Security with proven experience managing and implementing information security solutions
- Bachelors' degree in Computer Science, MIS, business, or equivalent experience is required.
- An advanced degree (e.g., MS with concentration in information systems) a plus
- IT Security and Risk Certification (e.g., CISSP) or Application Security Certification (e.g., CSSLP, GWAPT, GWEB, OSWA)
- Fluency in English is required
**Skill and Attributes**
- Excellent written and verbal communication skills in English
- Hands-on knowledge of information security areas such as DevSecOps, SSDLC, OWASP Top 10, Risk Analysis and Application Security Testing tools and techniques
- People and project management experience
**Marsh & McLennan Companies is a global professional services firm providing advice and solutions in the areas of risk, strategy and human capital.
It is the parent company of a number of the world's leading risk experts and specialty consultants, including Marsh, the insurance broker and risk advisor; Guy Carpenter, the risk and reinsurance specialist; Mercer, the provider of HR and related financial advice and services; and Oliver Wyman, the management consultancy.
With over 81,000 colleagues advise clients in 130 countries and annual revenue of nearly $19 billion, Marsh & McLennan Companies provides analysis, advice and transactional capabilities to clients in more than 130 countries.
Its stock (ticker symbol: MMC) is listed on the New York, Chicago and London stock exchanges.
**:
**Marsh McLennan is committed to embracing a diverse, inclusive and flexible work environment.
We aim to attract and retain the best people regardless of their sex/gender, marital or parental status, ethnic origin, nationality, age, background, disability, sexual orientation, gender identity, gender expression or any other characteristic protected by applicable law.
**: