(CEN) INTERNAL CONTROL GLOBAL CORPORATE CONTROLS ANALYST

Cemex; Monterrey; Presencial; MXN 600.000 - 960.000; Jornada completa

Descripción de la vacante

Cemex is seeking an Internal Control Global Corporate Controls Analyst to support IT control initiatives, maintain ITGC/ITAC, and ensure SOX/ICOFR alignment. The role collaborates with Internal Control Managers, P&IT, and external auditors to enhance control design and documentation.

Responsibilities include updating control matrices, coordinating remediation activities, and leveraging AI tools to improve efficiency while upholding governance and information security standards.

Formación

• Spanish – fluent; English – advanced (professional reading, writing, and conversation)
• Bachelor's degree in Accounting, Finance, Industrial Engineering, Information Systems, Business Administration.
• Postgraduate studies or specialization in Internal Control, IT Audit, Risk Management, Information Systems, or Information Technology are a plus.

Responsabilidades

• Document, maintain, and enhance ITGC and ITAC documentation across control narratives and flowcharts.
• Support Corporate Controls Matrices updates and governance requirements.
• Coordinate IT control initiatives and track deliverables and evidence with control owners.
• Monitor IT control gaps, enhancements, remediation plans, and closure dates.
• Support SOX/ICOFR compliance, audit activities, and evidence readiness.
• Assist with ServiceNow IRM and other IT control platforms; drive continuous improvement.

Conocimientos

Microsoft Office

ERP exposure

SAP exposure

ITGC/ITAC

ServiceNow IRM

GRC platforms

Educación

Bachelor's degree

Postgraduate studies in Internal Control/IT Audit

Herramientas

ServiceNow

ERP environments

Descripción del empleo

Job Description

The Internal Control Global Corporate Controls Analyst supports the execution of Internal Control initiatives, with a primary focus on Information Technology controls. The role maintains IT General Controls (ITGC), IT Application Controls (ITAC), process narratives, flowcharts, and related Corporate Controls Matrices, ensuring documentation remains accurate and aligned with actual processes, systems, risks, and SOX/ICOFR requirements.

Job Description

The Internal Control Global Corporate Controls Analyst supports the execution of Internal Control initiatives, with a primary focus on Information Technology controls. The role maintains IT General Controls (ITGC), IT Application Controls (ITAC), process narratives, flowcharts, and related Corporate Controls Matrices, ensuring documentation remains accurate and aligned with actual processes, systems, risks, and SOX/ICOFR requirements.

The position works closely with Internal Control Managers, P&IT, GES/EISM, process and control owners, Internal Audit, and external auditors. The role supports IT control initiatives including Example of One, gaps and enhancements, remediation activities, ServiceNow IRM, and selected corporate control initiatives related to emerging regulatory and technology requirements.

Main Responsibilities

• Document, maintain, and enhance ITGC and ITAC documentation, including process narratives, flowcharts, control descriptions, risks, procedures, and supporting guidance in the applicable Internal Control repositories and platforms.
• Support Corporate Controls Matrices updates, validation, and periodic maintenance, incorporating changes in systems, processes, risks, ownership, control design, and regulatory requirements.
• Support the execution of IT control initiatives, including Example of One for ITGC and ITAC, by coordinating inputs, documenting agreed control designs, tracking deliverables, and maintaining project documentation.
• Monitor IT control gaps, enhancements, and remediation plans, ensuring that actions, evidence, owners, dependencies, and target dates are appropriately documented and followed through to closure.
• Support SOX/ICOFR compliance and audit activities, including walkthroughs, information requests, evidence readiness, testing coordination, and follow-up with control owners, Internal Audit, and external auditors.
• Support the implementation, testing, administration, and continuous improvement of ServiceNow IRM and other Internal Control platforms related to IT controls and compliance activities.
• Support corporate control initiatives related to emerging regulatory and governance requirements, including ESG-related internal control considerations.
• Use Artificial Intelligence and other emerging technologies to improve efficiency, automate routine activities, enhance documentation, and strengthen Internal Control processes, while following applicable governance and information security requirements.
• Identify opportunities to standardize, simplify, and automate Internal Control activities, including documentation, monitoring, evidence collection, and remediation follow-up.

Position Challenges

• Understanding IT processes, applications, infrastructure, and their relationship with business processes and financial reporting risks.
• Maintaining ITGC and ITAC documentation and related Corporate Controls Matrices aligned with system implementations, process changes, and evolving control requirements.
• Coordinating stakeholders across Internal Control, P&IT, GES/EISM, business functions, Internal Audit, and external auditors.
• Managing competing priorities across SOX activities, audit requests, remediation plans, ServiceNow enhancements, ESG-related requirements, and control transformation initiatives.
• Translating technical changes, identified gaps, audit observations, and emerging regulatory requirements into clear and sustainable control documentation.
• Evaluating and applying Artificial Intelligence tools to improve efficiency while maintaining appropriate governance, information security, and control standards.
• Driving timely follow-up and accountability for gaps, enhancements, and remediation activities without direct authority over control owners.

Qualifications

Languages & proficiency:

Spanish – fluent, English – advanced (professional reading, writing, and conversation)

Academic Background

Bachelor's degree in Accounting, Finance, Industrial Engineering, Information Systems, Business Administration.

Postgraduate studies or specialization in Internal Control, IT Audit, Risk Management, Information Systems, or Information Technology are a plus.

Areas Of Expertise

• Internal Control, SOX/ICOFR, and COSO framework
• IT General Controls (ITGC), IT Application Controls (ITAC), or IT Audit
• Process and control documentation, walkthroughs, and Corporate Controls Matrices maintenance
• Control deficiency, gap, enhancement, and remediation follow-up, familiarity with emerging regulatory and governance requirements, including ESG-related internal control considerations – desirable.

Technical Skills

• Strong Microsoft Office skills
• Knowledge of ERP and enterprise application environments; SAP exposure is desirable.
• Experience with Governance, Risk & Compliance platforms; ServiceNow IRM is desirable.
• Understanding of access management, change management, IT operations, automated controls, interfaces, and reports is desirable.
• Familiarity with the practical use of Artificial Intelligence tools to improve efficiency, automate routine activities, enhance documentation, and strengthen Internal Control processes is desirable.
• Certifications such as CISA, COBIT, COSO, SOX, or CIA are a plus, but not mandatory.

Soft Skills

Strong written and verbal communication, analytical thinking and attention to detail and stakeholder management and cross-functional collaboration.

Internal/External Relations

INTERNAL

• Corporate and Central Internal Control teams.
• P&IT, GES/EISM, Finance, Procurement, Human Resources, Legal & Compliance, Internal Audit, Sustainability, and Corporate process and control owners.

EXTERNAL

• CEMEX's appointed external auditor.
• IT outsourcing and managed-service partners.
• Technology vendors and implementation partners, including ServiceNow-related service providers.

CEMEX Diversity and Inclusion Statement

At Cemex, we recognize the diversity of the world in which we live and in which we do business. We respect diversity, we address the inclusion and non-discrimination of any talented person, regardless of gender, physical ability, age, sexual orientation, culture, ethnicity, religion, political affiliation, marital status, pregnancy / maternity / paternity and nationality. We promote a culture of equity for the construction of a sustainable business and the well-being and development of Cemex employees.