Senior Cyber GRC Specialist

automotiveMastermind Inc.; Monterrey; Hybrid; MXN 850,000 - 1,276,000; Full time

Job summary

Mobility Global, the CARFAX division, seeks a Senior Cyber GRC Specialist to advance our enterprise governance, risk, and compliance program in a hybrid work setup in Monterrey.

You will coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX activities, respond to customer security questionnaires, and maintain evidence and security documentation for audits.

Qualifications

• 4-6 years of experience in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience supporting SOX ITGC, ISO 27001, SOC 2, or TISAX with audit evidence.
• Experience responding to customer security questionnaires and assurance activities.
• Strong written and verbal communication; ability to explain concepts to non-technical stakeholders.
• Experience coordinating internal/external audits and remediation tracking.

Responsibilities

• Coordinate compliance activities for SOX ITGC, ISO 27001, SOC 2, and TISAX.
• Serve as primary coordinator for customer security questionnaires, RFIs, RFPs, and security assessments.
• Maintain knowledge repository of responses, narratives, certifications, and evidence.
• Develop customer-facing security documentation like security overviews and control summaries.
• Coordinate audits and track findings and remediation through completion.
• Support risk assessments and control effectiveness reviews.
• Prepare compliance dashboards and risk reporting for leadership.
• Educate stakeholders on obligations and audit readiness.

Skills

SOX ITGC

ISO 27001

SOC 2

TISAX

Audit evidence

Customer questionnaires

Security controls

Risk management

Communication skills

Education

Bachelor’s degree

Tools

LogicGate

ServiceNow GRC

OneTrust

Job description

## Senior Cyber GRC SpecialistApply: MX - MONTERREY AVENIDA CONSTITUCION 2050: Full time: Posted Today: 610Location: Monterrey, Mexico | Employer: R.L. Polk, S. de R.L. de C.V. **Why Mobility Global?**At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we are creating new opportunities for our customers, our business, and our people.CARFAX, a division of Mobility Global, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. Shop, Buy, Service, Sell – Show me the CARFAXTM. **What You’ll Do*** Support the development, execution, and continuous improvement of the enterprise Cyber Governance, Risk, and Compliance (GRC) program, including security policies, standards, procedures, and control frameworks.* Coordinate compliance activities for SOX IT General Controls (ITGC), ISO 27001, SOC 2, and TISAX certifications and assessments, including the collection, validation, and maintenance of compliance evidence.* Serve as the primary coordinator for customer security questionnaires, due diligence requests, RFIs, RFPs, and security assessments, partnering with Sales, Legal, Security, Privacy, and Product teams to provide accurate and timely responses.* Maintain a knowledge repository of approved responses, control narratives, certifications, and evidence, and develop customer-facing security documentation such as security overviews, control summaries, and compliance attestations.* Coordinate internal, external, customer, and third-party audits by facilitating auditor requests and tracking findings and remediation activities through completion.* Support readiness assessments, gap analyses, and annual certification and attestation processes, while monitoring emerging regulatory and cybersecurity requirements.* Support enterprise cyber risk assessments, control effectiveness reviews, and third-party vendor security assessments, analyzing findings to identify trends and opportunities for control improvement.* Maintain compliance dashboards, metrics, and risk reporting for leadership and governance committees.* Build strong working relationships across Security, IT, Engineering, Legal, Privacy, Procurement, Internal Audit, and the business, and educate stakeholders on compliance obligations, control requirements, and audit preparedness. **What We’re Looking For***Required Qualifications** Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or equivalent work experience.* 4-6 years of experience in cybersecurity compliance, IT audit, risk management, governance, or information security.* Experience supporting one or more of SOX ITGC, ISO 27001, SOC 2, or TISAX, including gathering, validating, and maintaining audit evidence.* Experience responding to customer security questionnaires and conducting customer assurance activities, with an understanding of information security controls, risk management principles, and audit methodologies.* Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders, and strong organizational skills to manage multiple priorities. *Preferred Qualifications** Professional certifications such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or CGRC (formerly CAP).* Experience with GRC platforms such as LogicGate, ServiceNow GRC, OneTrust, or similar tools.* Knowledge of automotive cybersecurity requirements and TISAX assessment processes.* Experience supporting cloud environments, including Azure, AWS, or Google Cloud Platform.* Familiarity with NIST Cybersecurity Framework, CIS Controls, and privacy regulations. This is a hybrid role. The in-office and remote arrangement will be set out in the employment contract. Applicants must be legally authorized to work in Mexico at the time of hire. The company is unable to provide immigration or work permit support for this position. The gross annual base salary for this position is $850,000 – $1,276,000 MXN. The final offer will be based on experience, skills, and qualifications, consistent with the principle of equal pay for equal work. **Equal Opportunity**Mobility Global is committed to equal opportunity and non-discrimination in accordance with Mexican law. Hiring decisions are not based on origin, sex, gender, sexual orientation, age, disability, health, pregnancy, religion, marital status, appearance, or any other characteristic protected by law. We provide reasonable accommodations for candidates with disabilities. **Privacy Notice**R.L. Polk, S. de R.L. de C.V., with address at Avenida Constitución 2050, Monterrey, NL 64000, Mexico, processes your personal data to evaluate your application. Please do not include sensitive personal data or a photo in your CV. **Recruitment Fraud Alert**Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.