Senior Information Security

We are looking for a detail-oriented **Senior Information Security Analyst** to join our dedicated team.This position involves supporting third-party risk assessments and contributing to enterprise risk management efforts, ensuring regulatory compliance and safeguarding data within our vendor network.**Responsibilities**- Evaluate third-party risks with a focus on Information Security and GRC, enabling informed decisions regarding inherent and residual risks- Conduct due diligence on prospective and current vendors, emphasizing cybersecurity controls, regulatory compliance (e.g., GDPR, SOC 2, ISO 27001), and data protection measures- Ensure the integrity, consistency, and audit-readiness of third-party data within the GRC platform to meet reporting and regulatory standards- Collaborate with teams in Information Security, Privacy, Legal, Procurement, and Business Units to share findings and support enterprise risk management activities- Handle third-party offboarding processes, verifying risk management protocols and reviewing data retention, access, and continuity measures- Prepare documentation and responses for external audits, internal reviews, or regulatory inquiries related to third-party risk management matters- Maintain and refine TPRM policies, playbooks, and program metrics to aid program advancement**Requirements**:- 3+ years of experience in third-party risk management, information security, IT audit, or GRC, ideally within Gaming, Technology, or Consulting industries- Basic understanding of security risk frameworks and practices (e.g., NIST, ISO 27001, SIG, CSA, etc.)- Familiarity with tools like JIRA and GRC platforms (e.g., OneTrust, ServiceNow) with flexibility to learn and support data analysis and system enhancements- Strong verbal and written communication skills to cultivate collaboration across teams and organizational stakeholders- Adaptability in handling cross-functional tasks amid ambiguity or evolving requirements- General understanding of vendor management and data security regulations and standards- Awareness of IT risk management principles coupled with familiarity with S-SDLC and Agile Methodology- Fluent English communication skills at a B2+ level**We offer**- Career plan and real growth opportunities- Unlimited access to LinkedIn learning solutions- International Mobility Plan within 25 countries- Constant training, mentoring, online corporate courses, eLearning and more- English classes with a certified teacher- Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)- Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)- Flexible work schedule and dress code- Collaborate in a multicultural environment and share best practices from around the globe- Hired directly by EPAM & 100% under payroll- Law benefits (IMSS, INFONAVIT, 25% vacation bonus)- Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)- 13 % employee savings fund, capped to the law limit- Grocery coupons- 30 days December bonus- Employee Stock Purchase Plan- 12 vacations days plus 4 floating days- Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)- Monthly non-taxable amount for the electricity and internet billsEPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.