Security Questionnaire & Compliance Analyst

OpsArmy; Ciudad de México; Presencial; MXN 430,000 - 603,000; Jornada completa

Descripción de la vacante

An innovative tech startup in Mexico City is seeking a detail-oriented junior Information Security professional to assist with customer security questionnaires and reviews. This role offers a fantastic opportunity for recent graduates to gain hands-on experience in Information Security while collaborating with teams across Security, Sales, Legal, and Engineering. Successful candidates will have 0-2 years of experience and a strong curiosity for learning more about information security and risk management in the tech industry.

Formación

• 0–2 years of experience in Information Security or related field.
• Exposure to security frameworks like SOC 2 or ISO 27001.
• Strong written and verbal communication skills.

Responsabilidades

• Review and complete customer security questionnaires with accuracy.
• Assist with security-related sections of RFPs and RFIs.
• Maintain an up‑to‑date repository of security documentation.

Conocimientos

Attention to detail

Written communication

Organizational skills

Curiosity in information security

Descripción del empleo

We're looking for a detail-oriented junior Information Security professional to help review and complete customer security questionnaires, RFPs, and security reviews. This is a great opportunity for someone early in their InfoSec or GRC career to gain hands‑on experience at an AI-driven startup while working closely with our Security, Sales, Legal, and Engineering teams.

What You'll Do

• Review and complete customer security questionnaires (e.g., SIG, CAIQ, VSA, and custom formats) with high accuracy
• Assist with security‑related sections of RFPs and RFIs, ensuring responses are clear, consistent, and submitted on time
• Partner with Sales, Legal, Engineering, Product, and Security to gather and confirm required information
• Maintain a centralized, up‑to‑date repository of security documentation, FAQs, and standard responses
• Learn and document security controls, processes, and certifications (e.g., SOC 2, ISO 27001)
• Support follow‑up security reviews by tracking questions, clarifications, and approvals
• Help build templates, checklists, and lightweight processes to improve future response efficiency

What We're Looking For

• 0–2 years of experience in Information Security, GRC, Risk, Compliance, IT Audit, or a related field (internships and project work count).
• Exposure to security concepts and frameworks (e.g., SOC 2, ISO 27001, NIST, CIS) through work experience, coursework, or certifications.
• Bonus: experience with third‑party security questionnaires or RFP/RFI responses, even in a supporting role.
• Strong attention to detail and the ability to proofread for consistency, accuracy, and completeness.
• Excellent written and verbal communication skills, with a knack for explaining technical ideas in clear, simple language.
• Highly organized, comfortable tracking multiple requests at once, and reliable with deadlines.
• Curiosity and a desire to learn more about information security and how SaaS/AI companies manage risk.

Why This Role Is Exciting

• High visibility: Work directly with Security, Sales, Legal, and Engineering teams
• Learning opportunity: Hands‑on exposure to real customer security reviews and frameworks
• Impact: Help build customer trust and accelerate deals
• Growth: Opportunity to advance into broader InfoSec, GRC, or security operations roles