We are looking for a detail-oriented **Senior Information Security Analyst** to join our dedicated team.
This position involves supporting third-party risk assessments and contributing to enterprise risk management efforts, ensuring regulatory compliance and safeguarding data within our vendor network.
**Responsibilities**
- Evaluate third-party risks with a focus on Information Security and GRC, enabling informed decisions regarding inherent and residual risks
- Conduct due diligence on prospective and current vendors, emphasizing cybersecurity controls, regulatory compliance (e.g., GDPR, SOC 2, ISO 27001), and data protection measures
- Ensure the integrity, consistency, and audit-readiness of third-party data within the GRC platform to meet reporting and regulatory standards
- Collaborate with teams in Information Security, Privacy, Legal, Procurement, and Business Units to share findings and support enterprise risk management activities
- Handle third-party offboarding processes, verifying risk management protocols and reviewing data retention, access, and continuity measures
- Prepare documentation and responses for external audits, internal reviews, or regulatory inquiries related to third-party risk management matters
- Maintain and refine TPRM policies, playbooks, and program metrics to aid program advancement
**Requirements**:
- 3+ years of experience in third-party risk management, information security, IT audit, or GRC, ideally within Gaming, Technology, or Consulting industries
- Basic understanding of security risk frameworks and practices (e.g., NIST, ISO 27001, SIG, CSA, etc.)
- Familiarity with tools like JIRA and GRC platforms (e.g., OneTrust, ServiceNow) with flexibility to learn and support data analysis and system enhancements
- Strong verbal and written communication skills to cultivate collaboration across teams and organizational stakeholders
- Adaptability in handling cross-functional tasks amid ambiguity or evolving requirements




- General understanding of vendor management and data security regulations and standards
- Awareness of IT risk management principles coupled with familiarity with S-SDLC and Agile Methodology
- Fluent English communication skills at a B2+ level
**We offer**
- Career plan and real growth opportunities
- Unlimited access to LinkedIn learning solutions
- International Mobility Plan within 25 countries
- Constant training, mentoring, online corporate courses, eLearning and more
- English classes with a certified teacher
- Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)
- Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)
- Flexible work schedule and dress code
- Collaborate in a multicultural environment and share best practices from around the globe
- Hired directly by EPAM & 100% under payroll
- Law benefits (IMSS, INFONAVIT, 25% vacation bonus)
- Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)
- 13 % employee savings fund, capped to the law limit
- Grocery coupons
- 30 days December bonus
- Employee Stock Purchase Plan
- 12 vacations days plus 4 floating days
- Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)
- Monthly non-taxable amount for the electricity and internet bills
EPAM is a leading general provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

📌 Senior Information Security (Infosec) Analyst (México)
🏢 Epam Systems
📍 México