About the Role
The Business Information Security (BIS) team plays a critical role in ensuring security risks across business delivery and client engagements are effectively managed end-to-end. As a Business Information Risk Manager, you will act as a trusted advisor to business stakeholders, helping to strengthen security governance, drive compliance initiatives, and support risk management activities across multiple client environments and corporate functions.
Key Responsibilities
- Manage information security and compliance risks across business operations and service delivery.
- Partner with business stakeholders to understand critical security requirements and emerging risk scenarios.
- Lead risk assessments and control reviews for strategic client accounts.
- Provide recommendations to mitigate identified risks and strengthen security controls.
- Support security incident investigations and coordinate with incident management teams when required.
- Conduct annual security risk assessments and ongoing compliance activities.
- Lead and coordinate ISO 27001 audit activities, working closely with auditors and internal stakeholders.
- Ensure systems, processes, and policies align with ISO 27001 requirements, applicable regulations, and industry standards.
- Collaborate with cross-functional teams including Legal, HR, Privacy, IT, and business leadership.
- Evaluate compliance with contractual security obligations, internal policies, and regulatory requirements.
What We're Looking For
Essential Experience
- Experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a related discipline.
- Strong understanding of ISO 27001 Information Security Management Systems and risk assessment methodologies.
- Experience working with security frameworks such as ISO 27001, NIST, or ISF.
- Knowledge of technology risk management within enterprise environments.
- Experience supporting audits, compliance activities, or security governance programs.
- Excellent communication and stakeholder management skills.
- Professional working proficiency in both English and Spanish
Preferred Qualifications
- Security certifications such as CISSP, CISM, CISA, or equivalent (or currently pursuing certification).
- Knowledge of GDPR and EU data protection requirements.
- Understanding of SOC 1, SOC 2, SSAE/ISAE3402, and PCI-DSS frameworks.
- Basic knowledge of network and systems security technologies and practices.
Personal Attributes
We're looking for someone who:
- Thinks strategically and takes a proactive approach to problem-solving.
- Demonstrates sound judgement and attention to detail.
- Can communicate complex technical concepts to both technical and non-technical audiences.
- Thrives in a collaborative, international environment.
- Is comfortable working independently and managing multiple priorities.
- Is willing to travel occasionally (up to 10%).
Acerca de Cognizant
Cognizant (Nasdaq: CTSH) es un creador de soluciones de IA y proveedor de servicios tecnológicos que conecta la inversión en IA con el valor empresarial mediante el desarrollo de soluciones de IA full‑stack para sus clientes. Su profundo conocimiento de la industria, junto con su experiencia en procesos e ingeniería, permite incorporar el contexto único de cada organización en sistemas tecnológicos que amplifican el potencial humano, generan resultados tangibles y mantienen a las empresas a la vanguardia en un entorno en constante cambio. Más información en cognizant.ai o @cognizant.
Información adicional sobre el empleo
La información sobre la compensación es exacta en la fecha de publicación de este anuncio. Cognizant se reserva el derecho de modificar esta información en cualquier momento, de conformidad con la legislación aplicable.
Es posible que se solicite a los solicitantes que asistan a entrevistas de forma presencial o mediante videoconferencia. Asimismo, durante cada entrevista, los candidatos podrán estar obligados a presentar un documento de identidad válido emitido por el estado o por el gobierno.
Cognizant es un empleador que ofrece igualdad de oportunidades. Su solicitud y candidatura no se evaluarán en función de la raza, el color, el sexo, la religión, el credo, la orientación sexual, la identidad de género, el origen nacional, la discapacidad, la información genética, el embarazo, la condición de veterano ni cualquier otra característica protegida por las leyes federales, estatales o locales.
