Senior Cyber GRC Lead – Compliance & Risk (Hybrid)

Mobility Global Inc.; Monterrey; Hybrid; MXN 850.000 - 1.276.000; Vollzeit

Zusammenfassung

Mobility Global Inc. is seeking a Senior Cyber GRC Specialist in Monterrey, Mexico to lead the cybersecurity governance, risk, and compliance program.

You will coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX activities, while collaborating with Sales, Legal, Security, Privacy, and Product teams to provide timely responses to security questionnaires and audits. The role emphasizes building reusable evidence repositories, customer-facing security documentation, and ongoing risk assessments.

Qualifikationen

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or related field, or equivalent experience.
• 4–6 years in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience with SOX ITGC, ISO 27001, SOC 2, or TISAX certifications/assessments.
• Experience responding to customer security questionnaires and coordinating audit evidence.

Aufgaben

• Develop, execute, and improve the enterprise Cyber Governance, Risk, and Compliance program including policies and control frameworks.
• Coordinate audits and evidence collection across internal and external stakeholders.
• Respond to customer security questionnaires and RFIs with accurate control narratives and evidence.
• Maintain dashboards, metrics, and risk reporting for leadership and governance committees.
• Educate stakeholders on compliance obligations and audit readiness.

Kenntnisse

Cybersecurity knowledge

Strong communication

Organizational skills

Risk management principles

Ausbildung

Bachelor's degree

Tools

LogicGate

ServiceNow GRC

OneTrust

Jobbeschreibung

Mobility Global Inc. is seeking a Senior Cyber GRC Specialist in Monterrey, Mexico to lead the cybersecurity governance, risk, and compliance program.

You will coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX activities, while collaborating with Sales, Legal, Security, Privacy, and Product teams to provide timely responses to security questionnaires and audits. The role emphasizes building reusable evidence repositories, customer-facing security documentation, and ongoing risk assessments.