Position Overview Assists in the development of quality systems/tools/ materials and implements defined corporate Quality initiatives. Includes ISO9001, ISO27001, Software Engineering Institute (SEI) and continuous improvement processes. Assists functional teams to implement BMS model. Performs duties under general direction. Provides a high level of support/expertise in at least one discipline. Has competence in multiple disciplines. Assists on special projects under direction of more senior team member. Applies the tools and methodologies to complete and, where appropriate, lead tasks. Assists in the evaluation of new tools and procedures. Suggests solutions to issues or process improvements to management. This position reports into Global cloud quality assurance management for the business unit. It is team member position, with no direct reports. This position interlocks with teams distributed globally and has a regular connect with them Responsibilities Identify the InfoSec requirements (sources – ISO 27001, ISO 27018, ISO 27002, SOC 2 ) that are relevant for the cloud operations Understand the security features that are built in, in the products hosted on cloud Understand the operating tools, networks, infrastructure, security controls, firewalls, coding practices Identify the InfoSec risks and gaps Advise the team on various ways to address the gaps and the pros-cons of those options Review the implementation Act as a technical contact between the cloud team and the auditing teams Support builds the data base for audit evidences Required Knowledge/Skills, Education, and Experience Hands on experience of implementing InfoSec controls in cloud environment Hands on experience of auditing / reviewing InfoSec controls Lead auditor certification on ISO 27001 Demonstrate results in a time bound manner Able to collaborate and coordinate with globally distributed teams Good communication and reporting skills Proficiency with office collaboration tools 10 years of relevant experience / Mid to senior level person Business language is English and sufficient proficiency in English is necessary. Qualified Applicants must be legally authorized for employment in Mexico. Qualified Applicants will not require employer sponsored work authorization now or in the future for employment in Mexico. Preferred Knowledge/Skills, Education, and Experience Preferred to have InfoSec auditor certifications in SOC2, FEDRAMP etc. Basic education in engineering or Information technology or sciences Understanding of ITSM (ISO 20000) model Experience of implementing / adopting GRC tools At Siemens we are always challenging ourselves to build a better future. We need the most innovative and diverse Digital Minds to develop tomorrow’s reality. Find out more about the Digital world of Siemens here: siemens.com/careers/digitalminds #LI-AL1 #LI-PLM #DISW #LI-HYBRID Organization: Digital Industries Company: Siemens Industry Software, S.A. de C.V. Experience Level: Experienced Professional Full / Part time: Full-time