Senior Vendor Risk Analyst

Locations – Queretaro, Mexico City, Guadalajara, Monterrey

Are you an experienced, passionate pioneer in Cybersecurity, Governance & Risk processes? A Senior Vendor Risk Analyst who wants to work in a collaborative environment? As an experienced Senior Vendor Risk Analyst, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. Americas Delivery Mexico (ADMX) leverages scale and talent to provide high quality, cost-effective service to our clients.

Work you’ll do

This person will work with the integral vendor risk team to process US specific risk assessments. This role will serve as a senior contributor in the vendor risk function, supporting complex reviews, cross-functional coordination, and process maturity across the broader governance and risk landscape.

- Manage the global vendor risk assessment process as the DT-US firm security lead, ensuring assessments and findings are reviewed and approved in alignment with required SLAs.
- Perform and coordinate U.S.-specific vendor risk assessments in accordance with established policies, procedures, and risk management standards.
- Review and assess vendor-submitted documentation, including security questionnaires, policies, audit reports, and control evidence.
- Identify potential risk exposures, document findings, and communicate required remediation actions or follow-up items.
- Partner with stakeholders across cybersecurity, procurement, legal, compliance, and business teams to support timely and effective risk reviews.
- Maintain accurate assessment records, status updates, and supporting documentation within applicable systems and repositories.
- Monitor open issues and follow through on outstanding vendor responses, remediation items, and risk treatment actions.
- Support escalation of higher-risk matters in accordance with governance and reporting protocols.




- Contribute to the refinement and continuous improvement of vendor risk processes, templates, and operational practices.

The team

ADMX is a member of the Global Delivery Network which has presence across the world with Delivery centers in the United States, Romania, India, Spain, China, and the Philippines. ADMX is in Queretaro, Mexico. We provide consulting services to help our clients achieve a higher level of service in operational efficiency and business value.

We are a team of professionals passionate about serving clients with distinction and learning, and we are driven by our purpose: Making an impact that matters for our clients, our people, and society.

Qualifications

Required:

- Completion of course of study/Egresado in Cybersecurity, Information Security, Risk Management, Business Administration, or a related discipline; equivalent experience will also be considered Administration, International Business, Communication or related fields;
- Strong English oral and written communication skills.
- 3+ years of relevant experience in vendor risk management, third-party risk, cybersecurity, governance, risk, or compliance.
- Working knowledge of third-party risk assessment methodologies and control evaluation practices.
- Familiarity with common cybersecurity and risk frameworks, standards, or assurance reports.
- Strong analytical, organizational, and documentation skills with close attention to detail.
- Effective written and verbal communication skills.
- Ability to manage competing priorities and work effectively in a remote or hybrid team environment.





Applicants must be legally authorized to work in Mexico at the time of hire; limited sponsorship may be available for this role based on business needs and applicable law.

Preferred:

- Experience supporting U.S.-based risk, regulatory, or compliance requirements.
- Familiarity with frameworks or standards such as NIST, ISO 27001, and SOC reporting.
- Experience working with GRC, TPRM, or vendor risk management platforms.
- Relevant professional certifications are a plus.

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

Accommodations

We are committed to providing equal opportunity and reasonable accommodation for people with disabilities. To request a reasonable accommodation, contact our Talent Relations team at [email protected]

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

📌 Senior Vendor Risk Analyst (Ciudad de México)
🏢 Deloitte
📍 Ciudad de México