GRC Specialist, IT Compliance

Solera Holdings, LLC.; Santiago de Querétaro; Presencial; MXN 420.000 - 600.000; Jornada completa

Descripción de la vacante

Solera is seeking a GRC Specialist to support Information Security and Customer relationship teams in Mexico. You will respond to customer security requests, collect evidence for audits, and help maintain the governance, risk, and compliance program across Solera companies.

The role requires a BS/MS in Computer Science, strong English, and knowledge of SOC2/ISO27001/NIST frameworks. Collaboration with multiple teams and regions is essential.

Formación

• University degree in Computer Science (BS/MS).
• Knowledge of information security standards (SOC1/SOC2, ISO 27001, NIST 800-XX).
• Strong written and verbal English communication.
• Able to identify and analyze problems quickly and clearly.

Responsabilidades

• Respond to security requests from customers by coordinating with IT and Data Privacy.
• Follow up on customer security requests to ensure timely responses.
• Assist with evidence collection for customer security audits and reporting.

Conocimientos

Information security

SOC2

ISO 27001

NIST 800-XX

English communication

Problem solving

Analytical skills

Teamwork

Audits experience

Educación

BS/MS in Computer Science

Descripción del empleo

Solera is a global leader in data and software services that strives to transform every touchpoint of the vehicle lifecycle into a connected digital experience. In addition, we provide products and services to protect life’s other most important assets: our homes and digital identities. Today, Solera processes over 300 million digital transactions annually for approximately 235,000 partners and customers in more than 90 countries. Our 6,500 team members foster an uncommon, innovative culture and are dedicated to successfully bringing the future to bear today through cognitive answers, insights, algorithms and automation. For more information, please visitsolera.com.

GRC Specialist, IT Compliance / Mexico

Who We Are

Solera is a global leader in data and software services that strives to transform every touchpoint of the vehicle lifecycle into a connected digital experience. In addition, we provide products and services to protect life’s other most important assets: our homes and digital identities. Today, Solera processes over 300 million digital transactions annually for approximately 235,000 partners and customers in more than 90 countries. Our 6,500 team members foster an uncommon, innovative culture and are dedicated to successfully bringing the future to bear today through cognitive answers, insights, algorithms and automation. For more information, please visitsolera.com.

The Role

Supporting the Information Security and Customer relationship areas. Focused on ensuring security requests from our customers are responded appropriately and timely. You will be part of an international and multicultural team responsible for the Governance, Risk and Compliance (GRC) program across all companies at Solera. The ideal candidate is someone passionate in learning more within the information security field.

What You’ll Do

• Work collaboratively with key stakeholders (e.g., IT, Data Privacy, etc.) at Solera to respond to security requests from customers.
• Actively follow up customer's security requests ensuring proper and timely response.
• Assist with the coordination and evidence collection for customer security audits.
• Support the creation of a knowledge database of the security controls implemented at the different companies and products within Solera.
• Follow-up security risks stemming from customer’s security assessments.
• Develop and deliver reports to provide the status of the customer relationship process.
• Support the improvement of the overall customer relationship process.
• Obtain a deeper understanding of ISO, SOC2, NIST, and other frameworks and governance practices
• Meet and work with global peers and customers in an effort to provide them a security perspective

What You’ll Bring

• University degree (BS/MS) in Computer Science discipline or similar.
• Knowledge of information security standards and best practices (SOC1 and SOC2, ISO 27001, NIST 800-XX, etc.).
• Technical knowledge is a plus.
• Good written and verbal communication skills in English.
• Good problem identification, problem-solving, and analytical skills.
• Sound business discernment and adaptability to handle multiple requests with tight deadlines.
• Team working skills in order to collaborate with several teams at different locations and backgrounds.
• (Desirable) Experience with IT/Security audits.
• (Desirable) Experience in the use of GRC management tools.

It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.