Security Auditor Jr

Location: Mexico, Aguascalientes, Monterrey, Ciudad de México, Guadalajara, Ensenada

Work Location: hybrid

• 1–2 years of experience in GRC, IT audit, information security, or third-party risk support roles (internship or entry-level professional experience acceptable).
• Basic understanding of vendor risk assessment concepts and security due diligence documentation (policies, certifications, audit reports).

• Exposure to — or coursework/training in — SIG questionnaires or similar standardized security questionnaires is a plus, not mandatory.
• Comfortable with structured, high-volume administrative and coordination work (tracking, correspondence, documentation review).
• General exposure to IRM/GRC platforms is a plus; not required. Willingness and aptitude to learn Radian's NAVEX/EBX environment is expected.

• Support profiling: engagement record review, SDD record creation, documentation checklist prep.
• Execute vendor correspondence and follow-ups on Reduced Due Diligence cases.
• Perform first-pass review of Reduced Due Diligence questionnaires and documentation.
• Maintain IRM dashboard updates and SLA tracking logs.
• Escalate per defined thresholds; route Full DD / high-complexity findings to the Proficient analyst.
• Progressively take on Full Due Diligence support tasks as ramp-up governance milestones are met.