IT PRC Methodology Lead — GRC & Risk Framework

EY; Tandil; Presencial; ARS 106.019.000 - 166.601.000; Jornada completa

Descripción de la vacante

EY is seeking a Policy, Risk and Control (PRC) Methodology Specialist to join its Information Security team. The role focuses on administering the IT PRC Framework, aligning risk, controls, and policies with industry standards, and driving adoption across global projects.

You will collaborate with Global Methodology leads and cross-functional partners including Internal Audit, Legal, and Enterprise Technology to strengthen governance, risk management, and compliance capabilities.

Formación

• Experience in IT risk management and security controls.
• Knowledge of GDPR, DORA, SOX, and related regulatory requirements.
• Ability to work effectively in global, cross-functional teams.
• Strong analytical and communication skills.

Responsabilidades

• Administer and enhance the IT PRC Framework.
• Partner with Global Methodology Program Lead to advance the program.
• Support adoption of the PRC Framework across projects and programs.
• Develop cross-mappings of PRC controls with IS policies and standards.
• Collaborate with Risk, Control, Compliance, and Assessment teams.
• Assist in leveraging GRC tools to strengthen assessment activities.

Conocimientos

Information Security

GRC frameworks

Regulatory knowledge

English communication

Cross-functional collaboration

Analytical thinking

Educación

Advanced degree in Computer Science / Information Security / Risk Management

Herramientas

Archer

GRC platforms

MS Office 365

Descripción del empleo

EY is seeking a Policy, Risk and Control (PRC) Methodology Specialist to join its Information Security team. The role focuses on administering the IT PRC Framework, aligning risk, controls, and policies with industry standards, and driving adoption across global projects.

You will collaborate with Global Methodology leads and cross-functional partners including Internal Audit, Legal, and Enterprise Technology to strengthen governance, risk management, and compliance capabilities.