Remote GRC & Vendor Security Analyst

Scale Up Recruiting Partners; Monterrey; Presencial; MXN 1.201.000 - 1.887.000; Jornada completa

Descripción de la vacante

Scale Up Recruiting Partners is seeking an Information Security Analyst to own vendor security questionnaires for multiple client accounts. This contractor role requires coordinating with U.S.-based startups, monitoring requests, and delivering accurate responses on time.

You will work with security frameworks, maintain knowledge bases, and collaborate with security engineers and consultants to close enterprise deals across client projects.

Formación

• 2–4 years of experience completing vendor security questionnaires.
• Hands-on experience with SIG, CAIQ, or custom vendor security questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Understanding of core security concepts including SSO, MFA, encryption, cloud, backup and vendor risk.

Responsabilidades

• Monitor client Slack channels and respond to security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other systems to track requests through completion.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using OneTrust, Whistic, SecurityScorecard, etc.
• Develop understanding of each client's security posture, policies, and controls.
• Maintain and improve client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and SMEs as needed.
• Escalate gaps that impact questionnaire responses.
• Ensure all questionnaires are completed accurately and on time.

Conocimientos

Vendor security questionnaires

GRC/compliance

Security posture knowledge

Stakeholder communication

English proficiency

Herramientas

OneTrust

Whistic

SecurityScorecard

Jira

Linear

Descripción del empleo

Scale Up Recruiting Partners is seeking an Information Security Analyst to own vendor security questionnaires for multiple client accounts. This contractor role requires coordinating with U.S.-based startups, monitoring requests, and delivering accurate responses on time.

You will work with security frameworks, maintain knowledge bases, and collaborate with security engineers and consultants to close enterprise deals across client projects.