RequirementsMust have

- 1–2 years of experience in GRC, IT audit, information security, or third-party risk support roles (internship or entry-level professional experience acceptable).
- Basic understanding of vendor risk assessment concepts and security due diligence documentation (policies, certifications, audit reports).

Nice to have:
- Exposure to — or coursework/training in — SIG questionnaires or similar standardized security questionnaires is a plus, not mandatory.
- Comfortable with structured, high-volume administrative and coordination work (tracking, correspondence, documentation review).
- General exposure to IRM/GRC platforms is a plus; not required. Willingness and aptitude to learn Radian's NAVEX/EBX environment is expected.

Responsibilities:

- Support profiling: engagement record review, SDD record creation, documentation checklist prep.




- Execute vendor correspondence and follow-ups on Reduced Due Diligence cases.
- Perform first-pass review of Reduced Due Diligence questionnaires and documentation.
- Maintain IRM dashboard updates and SLA tracking logs.
- Escalate per defined thresholds; route Full DD / high-complexity findings to the Proficient analyst.
- Progressively take on Full Due Diligence support tasks as ramp-up governance milestones are met.

Required LanguagesEnglish Fluent advanced 90-100%

Job LocationThis position is based in Mexico, with specific locations including Aguascalientes, Monterrey, Ciudad de México, Guadalajara, and Ensenada.

📌 Security Auditor Jr (Guadalajara)
🏢 SOFTTEK
📍 Guadalajara