Third-Party Risk & Security Assurance Analyst

Socotra, Inc.; Ciudad de México; Híbrido; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Lyft is seeking an in-office role in Mexico City with a hybrid schedule. The candidate will support the Privacy and Compliance team through third party risk assessments, security questionnaires, and program management activities, focusing on data protection and regulatory compliance.

The role emphasizes collaboration with internal stakeholders and external partners. The ideal candidate has 1–3 years in program management for security/compliance, familiarity with major frameworks, and strong

Formación

• 1–3 years of program management experience supporting third party risk management and security compliance/assurance.
• Knowledge of security frameworks such as ISO 27001, SOC 2, PCI DSS, SOX ITGC or GDPR/NIS2— or other international privacy/security regulations.
• Excellent attention to detail and strong organizational skills.
• Ability to manage a large workload and competing priorities amid resourcing constraints and deadlines.
• Strong written and verbal communication across technical, business, and executive audiences.
• Interest in leveraging AI tools or LLMs to automate, improve, or design compliance processes and documentation.
• Familiarity with GRC platforms (e.g., AuditBoard, CrossComply, Vanta/Drata), Safebase, Jira, and vendor management tools.
• Knowledge of microservices SaaS product infrastructures or tech stacks is a plus.

Responsabilidades

• Conduct third party risk assessments with internal stakeholders and document risk findings.
• Draft responses to customer security questionnaires (CAIQ, SIG) and support SafeBase questionnaire management.
• Assist in program management tasks: manage workflows, queues, and tooling; help track and report metrics.

Conocimientos

Program management

Security frameworks

Attention to detail

Prioritization

Communication skills

AI tools in compliance

GRC platforms

Microservices SaaS knowledge

Educación

Bachelor's degree in Information Systems/CS/Cybersecurity

Certifications such as PMP/CIPP/CompTIA Security+

Herramientas

Jira

Safebase

Vanta

Drata

AuditBoard

CrossComply

Descripción del empleo

Lyft is seeking an in-office role in Mexico City with a hybrid schedule. The candidate will support the Privacy and Compliance team through third party risk assessments, security questionnaires, and program management activities, focusing on data protection and regulatory compliance.

The role emphasizes collaboration with internal stakeholders and external partners. The ideal candidate has 1–3 years in program management for security/compliance, familiarity with major frameworks, and strong