Security Analyst
Mexico City, MEX, Mexico
DiDi Global
Company Overview
DiDi Global Inc. is the world’s leading mobility technology platform. It offers a wide range of app-based services across markets including Asia-Pacific, Latin America and Africa, including ride hailing, taxi hailing, chauffeur, hitch and other forms of shared mobility as well as auto solutions, food delivery, intra-city freight, and financial services.
DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry and the communities to solve the world’s transportation, environmental and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive and sustainable transportation and local services ecosystem for cities of the future.
For more information, please visit: www.didiglobal.com/news
#LI-Hybrid
Team Overview
Sofipo is a upcoming company in the Mexico FinTech industry, committed to delivering secure, innovative financial solutions. We are seeking a dedicated and detail-oriented Security Analyst to strengthen our security operations and identity management practices. If you are task- and result-oriented, thrive in a fast-paced environment, and bring a strong foundation in security and FinTech experience, we’d love to hear from you!
Role Responsibilities
Security Operations (SecOps):
- Monitoring, investigating, and responding to security alerts and incidents.
- Performing threat analysis and vulnerability assessments.
- Collaborating with the SOC team to enhance incident response and threat detection capabilities.
Identity and Access Management (IAM):
- Managing IAM operations, ensuring secure and seamless access control across systems.
- Supporting the implementation of least privilege and Zero Trust principles.
- Monitoring and mitigating unauthorized access attempts.
Compliance and Risk Management:
- Supporting compliance with relevant standards and regulations (e.g., GDPR, PCI DSS).
- Identifying and assessing security risks, providing actionable recommendations.
Collaboration Across Teams:
- Working closely with IT, development, and compliance teams to integrate security into business operations.
- Assisting in educating employees on security best practices.
Documentation and Reporting:
- Creating and maintaining security policies, procedures, and incident documentation.
- Reporting on security metrics and providing insights to leadership.
Role Qualifications
- Experience with security operations, including monitoring, detection, and incident response.
- Hands-on experience with Identity and Access Management (IAM) tools and processes.
- Knowledge of FinTech-specific threats and regulatory requirements.
- Experience working in global organizations with complex, distributed environments.
- Strong analytical and problem-solving skills with a results-oriented mindset.
- Familiarity with security frameworks such as NIST CSF, ISO 27001, or SOC 2.
- Excellent communication and documentation skills.
EEO Statement
- We create customer value – We strive to always create valuable experiences for our users in everything we do. Our focus is to always innovate new experiences that are safe, pleasant, and efficient.
- We are data-driven – We are strong believers in making informed decisions, that’s why we are data-driven. We can better navigate the business landscape strategically by analyzing valuable metrics.
- We believe in Win-win Collaboration – Success is a team sport. When we work to help our partners and colleagues win, we win, too. While keeping everyone's best interest at heart, we communicate with candor and execute with excellence in all we do.
- We believe in integrity – Integrity is at the very core of our business. We are people who always want to do the right thing. Our intentions are sincere, we speak our minds and listen to each other.
- We always strive to do better. That means venturing beyond our comfort zones, learning from our mistakes, and helping each other grow.
- We believe in Diversity and Inclusion – Diversity is one of our biggest strengths. Our differences are what makes us distinct. We respect each other and believe in equal opportunities for all.
We are committed to building inclusive and diverse teams.
At DiDi, we believe that our differences are our biggest source of strength. That‘s why we are committed to promoting equal opportunities to all candidates and employees as an Equal Opportunity Employer.
Employment and advancement decisions at DiDi are always made based on the needs of the position and the qualifications of the candidate. We do not discriminate against any employee or applicant based on their gender, age, sexual orientation, nationality, marital status, pregnancy/maternity, disability, race, religion and beliefs, or any other status protected by applicable laws wherever we operate.
We are committed to building inclusive and diverse teams, and a workplace that is free from discrimination and harassment, because that’s how we create better products and services, make better decisions and better serve the communities we’re a part of.
I acknowledge that prior to submitting this application, I have read and accepted the Privacy Notice for Candidates which is available on https://careers.didiglobal.com/terms
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Compliance FinTech GDPR IAM Incident response ISO 27001 Monitoring NIST PCI DSS Privacy Risk management SecOps SOC SOC 2 Threat detection Zero Trust
Perks/benefits: Career development Flex hours
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.