Senior Cyber GRC Strategist

R.L. Polk S. de R.L. de C.V.; Monterrey; Hybrid; MXN 850,000 - 1,276,000; Full time

Job summary

Mobility Global, including CARFAX division, seeks a cybersecurity governance, risk, and compliance professional in Monterrey to support our GRC program. You’ll coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX activities, gather audit evidence, and help prepare customer security responses.

In this hybrid role, you’ll collaborate with Sales, Legal, Security, Privacy, and Product teams, maintaining evidence repositories and dashboards for leadership.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, IT, or related field.
• 4–6 years in cybersecurity compliance, IT audit, risk management, governance, or information security.
• Experience with SOX ITGC, ISO 27001, SOC 2, or TISAX and audit evidence collection.
• Ability to explain technical concepts to non-technical stakeholders and manage multiple priorities.

Responsibilities

• Support development, execution, and improvement of enterprise GRC program.
• Coordinate audits and compliance evidence collection across frameworks.
• Respond to customer security questionnaires, RFIs, and security assessments.
• Maintain control narratives, attestations, and evidence repositories.
• Prepare customer-facing security documentation and dashboards for leadership.

Skills

Cybersecurity compliance

Audit evidence gathering

Communication skills

Risk management

Education

Bachelor’s degree in Cybersecurity, IT, IS, or related field

Tools

LogicGate

ServiceNow GRC

OneTrust

Job description

Mobility Global, including CARFAX division, seeks a cybersecurity governance, risk, and compliance professional in Monterrey to support our GRC program. You’ll coordinate SOX ITGC, ISO 27001, SOC 2, and TISAX activities, gather audit evidence, and help prepare customer security responses.

In this hybrid role, you’ll collaborate with Sales, Legal, Security, Privacy, and Product teams, maintaining evidence repositories and dashboards for leadership.