About Mobility Global
S&P Global has recently
announced the intent to separate our Mobility Segment into a standalone public company.
About the Role:
The Cyber Compliance & Customer Assurance Specialist will support enterprise-wide cybersecurity compliance and customer assurance activities, including certification and audit readiness for frameworks such as SOX, ISO 27001, SOC 2, and TISAX. This role is responsible for executing compliance processes, coordinating audit evidence, responding to customer security questionnaires and audits, and supporting the broader Cyber Governance, Risk & Compliance program
The Team:
A global Cyber Governance, Risk & Compliance (GRC) team that is responsible for managing cyber risk, driving policy adherence, enabling compliance, supporting customer trust initiatives, and delivering enterprise-wide governance processes. The team partners across IT, Security, Legal, Risk, Privacy, Sales, and Business functions to deliver integrated risk management and assurance capabilities.
Responsibilities and Impact:
- Support compliance activities and control testing aligned to SOX, ISO 27001, SOC 2, TISAX, and other applicable regulatory and contractual requirements.
- Coordinate internal and external audits by managing evidence collection, maintaining documentation, tracking remediation activities, and supporting certification readiness efforts across applicable frameworks.
- Respond to customer security questionnaires, due diligence requests, and customer-led audits, ensuring accurate and timely representation of the organization's security and compliance posture.
- Maintain and administer cybersecurity compliance frameworks, policies, and standards, ensuring alignment with control requirements across SOX, ISO 27001, SOC 2, and TISAX.
- Prepare and maintain compliance and customer assurance metrics, dashboards, and reports for leadership review and governance forums.
- Administer cybersecurity risk exception and control exception processes, including intake, documentation, tracking, and follow-up activities to ensure timely review and resolution.
- Assist in the preparation of materials and reporting for governance committees, including the Information Security Governance Committee (ISGC).
- Track control ownership, testing schedules, and evidence requests across compliance frameworks to support continuous audit readiness.
- Collaborate with stakeholders across Legal, Privacy, Risk, Sales, Procurement, and business teams to support customer assurance requests, audit response, and compliance initiatives.
What We're Looking For:
- 4-6 years working experience in one or more areas of cybersecurity compliance, controls testing, audit, or customer assurance.
- Working knowledge of cybersecurity compliance and control frameworks (SOX, ISO 27001, NIST, TISAX, SOC 2).
- Experience supporting compliance audits, control testing, or certification readiness activities.
- Experience responding to customer security questionnaires, due diligence requests, or customer-led audits.
- Experience developing and maintaining metrics, dashboards, reports, and documentation for compliance and assurance programs.
- Strong written and verbal communication skills with the ability to translate technical concepts into business-focused communications.
- Ability to collaborate effectively with cross-functional teams and manage multiple priorities in a fast-paced environment.
- Strong analytical, organizational, and problem-solving skills with attention to detail.
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.
