Remote IT Internal Controls Lead — Audit & Cybersecurity

Lafarge Africa Plc; Medellín; Hybrid; COP 40,000,000 - 65,000,000; Full time

Job summary

Holcim Americas Digital Center (ADC) in Medellín is seeking an IT Internal Control Specialist (MX) to lead the IT internal control lifecycle—design, testing of operating effectiveness, remediation, and continuous improvement—across our Mexico operations.

The role requires a Bachelor’s degree in IT/CS, 3–5 years in IT security or security architecture, English at B2, and knowledge of NIST or ISO 27001. Fixed-term through December 2027; Monday to Friday.

Qualifications

• Bachelor’s Degree in Information Technology, Computer Engineering, Software Engineering, or related fields.
• 3-5 years of professional experience in IT security, cybersecurity, offensive security, and/or security architecture.
• English proficiency (Minimum B2 level).
• Strong knowledge and application of cybersecurity and IT control frameworks such as NIST or ISO 27001.
• Contract Type: Fixed-Term Contract (Projected through December 2027).
• Schedule: Monday to Friday

Responsibilities

• Planning & Execution: Lead the IT internal control lifecycle, including control design, evaluation of operating effectiveness, remediation planning, and continuous improvement.
• Audit Support: Act as the primary liaison and facilitator to support internal and external audit requirements.
• Mitigation & Remediation: Document control deficiencies/gaps and design formal action and remediation plans in collaboration with IT functional leaders.
• Change Management: Facilitate the adoption of global internal control standards and cybersecurity best practices across legacy/local environments, promoting segregation of duties.
• IT Governance: Ensure control compliance across key operational areas, including Access Management, Change Management, and IT Operations.

Skills

IT security

Cybersecurity

English (B2)

Auditing liaison

Change management

Education

Bachelor's degree in IT/CS

Tools

NIST

ISO 27001

Job description

Holcim Americas Digital Center (ADC) in Medellín is seeking an IT Internal Control Specialist (MX) to lead the IT internal control lifecycle—design, testing of operating effectiveness, remediation, and continuous improvement—across our Mexico operations.

The role requires a Bachelor’s degree in IT/CS, 3–5 years in IT security or security architecture, English at B2, and knowledge of NIST or ISO 27001. Fixed-term through December 2027; Monday to Friday.