Cyber Risk & GRC Analyst - Assessments & Reporting

Itmc Systems, Inc; México; On-site; MXN 420,000 - 660,000; Full time

Job summary

Itmc Systems, Inc. seeks a cybersecurity risk analyst to conduct risk assessments across applications and platforms, identify gaps, and track remediation actions. You will collect evidence, coordinate with owners, and maintain trackers and reports in Excel.

The role requires 3+ years in cyber risk/GRC and strong documentation skills, with clear written English and ability to present status updates. Overlaps with U.S. Eastern Time are expected.

Qualifications

• 3+ years of experience in cyber risk, GRC, software security assessments, vulnerability management, or technology risk.
• Experience assessing applications, platforms, or systems for security gaps.
• Strong documentation and evidence-collection skills.
• Experience tracking vulnerabilities, remediation actions, and assessment findings.
• Ability to write clear, defensible risk statements and supporting rationale.
• Strong Excel skills, including assessment trackers, reporting, and rollups.
• Experience working directly with application owners and technical stakeholders.
• Clear written English and the ability to present concise status updates.
• Availability for significant U.S. Eastern Time overlap.

Responsibilities

• Conduct cybersecurity risk assessments across business applications, platforms, and technology services.
• Identify control gaps, vulnerabilities, security concerns, and required remediation actions.
• Build and maintain scenario-based cyber risk statements.
• Collect evidence and stakeholder comments supporting assessment conclusions.
• Coordinate working sessions with application and system owners.
• Track remediation items, open assessments, documentation gaps, and roadblocks.
• Support vulnerability validation and remediation tracking.
• Maintain assessment trackers and reporting in Excel.
• Upload artifacts to SharePoint or the designated repository for audit readiness.
• Support migration of assessment processes into Onspring.
• Produce weekly status updates, leadership summaries, and steering-meeting reporting.
• Monitor Cyber Key Risk Indicators and emerging risk signals.

Skills

Cyber risk

GRC

Vulnerability management

Software security assessments

Technology risk

Documentation

Excel

Stakeholder communication

Tools

SharePoint

Onspring

Excel

Job description

Itmc Systems, Inc. seeks a cybersecurity risk analyst to conduct risk assessments across applications and platforms, identify gaps, and track remediation actions. You will collect evidence, coordinate with owners, and maintain trackers and reports in Excel.

The role requires 3+ years in cyber risk/GRC and strong documentation skills, with clear written English and ability to present status updates. Overlaps with U.S. Eastern Time are expected.