Senior Cyber GRC Specialist

R. L. Polk Mobility LLC; Monterrey; Hybrid; MXN 850,000 - 1,276,000; Full time

Job summary

Mobility Global in Monterrey, MX seeks a cybersecurity compliance professional to support enterprise GRC programs, audits, and customer assurance activities. You will coordinate with Sales, Legal, Security, Privacy, and Product teams to ensure compliance readiness and respond to security questionnaires.

Required are 4–6 years of relevant experience, knowledge of SOX ITGC, ISO 27001, SOC 2, or TISAX, and strong communication skills. This is a hybrid role with local employment considerations.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• 4-6 years of experience in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience supporting SOX ITGC, ISO 27001, SOC 2, or TISAX with audit evidence.
• Experience responding to customer security questionnaires and conducting assurance activities.
• Strong written and verbal communication and organizational skills.

Responsibilities

• Support the development, execution, and continuous improvement of the enterprise Cyber Governance, Risk, and Compliance program.
• Coordinate compliance activities for SOX ITGC, ISO 27001, SOC 2, and TISAX certifications and assessments.
• Serve as primary coordinator for customer security questionnaires, due diligence requests, RFIs, RFPs, and security assessments.
• Maintain a knowledge repository of approved responses, control narratives, certifications, and evidence.
• Coordinate internal, external, customer, and third-party audits by facilitating auditor requests and tracking findings.
• Support readiness assessments, gap analyses, and annual certification and attestation processes.
• Support enterprise cyber risk assessments and third-party vendor security assessments.
• Maintain compliance dashboards, metrics, and risk reporting for leadership.
• Build relationships across Security, IT, Engineering, Legal, Privacy, Procurement, Internal Audit, and the business.

Skills

Communication skills

Organizational skills

Risk management principles

Audit methodologies

Customer assurance activities

Education

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or related field

Tools

LogicGate

ServiceNow GRC

OneTrust

Job description

Location: Monterrey, Mexico | Employer: R.L. Polk, S. de R.L. de C.V.

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we are creating new opportunities for our customers, our business, and our people.

CARFAX, a division of Mobility Global, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. Shop, Buy, Service, Sell – Show me the CARFAX.

What You'll Do

• Support the development, execution, and continuous improvement of the enterprise Cyber Governance, Risk, and Compliance (GRC) program, including security policies, standards, procedures, and control frameworks.
• Coordinate compliance activities for SOX IT General Controls (ITGC), ISO 27001, SOC 2, and TISAX certifications and assessments, including the collection, validation, and maintenance of compliance evidence.
• Serve as the primary coordinator for customer security questionnaires, due diligence requests, RFIs, RFPs, and security assessments, partnering with Sales, Legal, Security, Privacy, and Product teams to provide accurate and timely responses.
• Maintain a knowledge repository of approved responses, control narratives, certifications, and evidence, and develop customer-facing security documentation such as security overviews, control summaries, and compliance attestations.
• Coordinate internal, external, customer, and third-party audits by facilitating auditor requests and tracking findings and remediation activities through completion.
• Support readiness assessments, gap analyses, and annual certification and attestation processes, while monitoring emerging regulatory and cybersecurity requirements.
• Support enterprise cyber risk assessments, control effectiveness reviews, and third-party vendor security assessments, analyzing findings to identify trends and opportunities for control improvement.
• Maintain compliance dashboards, metrics, and risk reporting for leadership and governance committees.
• Build strong working relationships across Security, IT, Engineering, Legal, Privacy, Procurement, Internal Audit, and the business, and educate stakeholders on compliance obligations, control requirements, and audit preparedness.

What We're Looking For

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or equivalent work experience.
• 4-6 years of experience in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience supporting one or more of SOX ITGC, ISO 27001, SOC 2, or TISAX, including gathering, validating, and maintaining audit evidence.
• Experience responding to customer security questionnaires and conducting customer assurance activities, with an understanding of information security controls, risk management principles, and audit methodologies.
• Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders, and strong organizational skills to manage multiple priorities.

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or CGRC (formerly CAP).
• Experience with GRC platforms such as LogicGate, ServiceNow GRC, OneTrust, or similar tools.
• Knowledge of automotive cybersecurity requirements and TISAX assessment processes.
• Experience supporting cloud environments, including Azure, AWS, or Google Cloud Platform.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, and privacy regulations.

This is a hybrid role. The in-office and remote arrangement will be set out in the employment contract.

Applicants must be legally authorized to work in Mexico at the time of hire. The company is unable to provide immigration or work permit support for this position.

The gross annual base salary for this position is $850,000 - $1,276,000 MXN. The final offer will be based on experience, skills, and qualifications, consistent with the principle of equal pay for equal work.

Equal Opportunity

Mobility Global is committed to equal opportunity and non-discrimination in accordance with Mexican law. Hiring decisions are not based on origin, sex, gender, sexual orientation, age, disability, health, pregnancy, religion, marital status, appearance, or any other characteristic protected by law. We provide reasonable accommodations for candidates with disabilities.

Privacy Notice

R.L. Polk, S. de R.L. de C.V., with address at Avenida Constitución 2050, Monterrey, NL 64000, Mexico, processes your personal data to evaluate your application. Please do not include sensitive personal data or a photo in your CV.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.