IT PRC Methodology Specialist — Governance & Risk (Hybrid)

EY; Buenos Aires; On-site; ARS 900,000 - 1,300,000; Full time

Job summary

EY’s Policy, Risk and Controls (PRC) Methodology Specialist role focuses on administering and enhancing the IT PRC Framework, aligning IT risk, policy, and controls with global GRC standards. You will collaborate across Risk, Compliance, and IT to strengthen methodologies and governance while promoting risk-awareness and scalable controls.

The role requires strong communication, analytical thinking, and stakeholder engagement in a global, cross-functional environment.

Qualifications

• 3–5 years progressive experience in IT, InfoSec, security compliance, IT risk management, or related disciplines.
• Advanced degree in Computer Science, Information Security, Risk Management, or related field, or equivalent work experience.
• Knowledge of GRC principles and application in technology, information security, and risk management; familiarity with Archer or comparable platforms.
• Experience with industry standards and control frameworks (ISO, NIST, COBIT, PCI DSS, GDPR, SOX).
• Experience applying risk and control concepts to evaluate control effectiveness and support methodology development.

Responsibilities

• Lead the continuous improvement of the IT PRC Framework operating model.
• Partner with the Global Methodology Program Lead to advance service offerings and objectives.
• Develop and refine documentation, processes, and program artifacts throughout lifecycles.
• Develop cross-mappings of PRC common controls against policies and standards.
• Support integration, adoption, and effective use of GRC technologies and tools.

Skills

InfoSec principles

GRC knowledge

Analytical thinking

Communication

Cross-functional collaboration

Program management

Automation & technology

Learning mindset

Education

Advanced degree in CS/InfoSec/Risk Mgmt

Tools

Archer

Unified Compliance Framework

Job description

EY’s Policy, Risk and Controls (PRC) Methodology Specialist role focuses on administering and enhancing the IT PRC Framework, aligning IT risk, policy, and controls with global GRC standards. You will collaborate across Risk, Compliance, and IT to strengthen methodologies and governance while promoting risk-awareness and scalable controls.

The role requires strong communication, analytical thinking, and stakeholder engagement in a global, cross-functional environment.