GRC Analyst, InfoSec - Compliance & Automation

Concord; Ciudad de México; Presencial; MXN 360.000 - 540.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Grocery Vouchers

Internet Bonus

Medical Insurance

Life Insurance

Dental Insurance

Law Benefits

Descripción de la vacante

Concord is seeking a detail‑oriented GRC Analyst to join our Information Security team in Mexico City. This full‑time, in‑person role supports policy maintenance, audit evidence collection, and GRC process automation across PCI DSS, SOC 1/2, and HIPAA.

You will collaborate with IT, Legal, and operations to improve compliance visibility. Ideal candidates have a foundational GRC or security background, strong English and Spanish, and a proactive attitude to grow within a structured environment.

Formación

• Foundational understanding of GRC, Information Security, compliance, or related field.
• Familiar with regulatory frameworks in the United States (PCI, SOC, HIPAA preferred).
• Excellent written and verbal English and Spanish communication.
• Attention to detail, organization, and task prioritization.
• Willingness to learn and grow in a structured compliance environment.
• Collaborative mindset across teams and levels.

Responsabilidades

• Policies & Procedures: assist in maintenance and updating of information security policies.
• Audit Evidence Collection: gather and organize audit evidence across multiple frameworks.
• GRC Automation: help automate manual GRC processes using AI and scripting.
• Documentation: record workflows and guides for internal reviews and audits.
• Compliance Monitoring: stay aware of regulatory changes and track impact.
• Cross-Functional Collaboration: work with IT, Legal, Ops, and business units.
• Metrics & Reporting: maintain GRC dashboards and status reports.

Conocimientos

GRC basics

Information Security

Audit evidence

Policy maintenance

Regulatory awareness

Cross-functional collaboration

English and Spanish

AI tools

Scripting languages

Workflow automation

Herramientas

AI-powered tools

Scripting languages

Workflow automation platforms

Descripción del empleo

Concord is seeking a detail‑oriented GRC Analyst to join our Information Security team in Mexico City. This full‑time, in‑person role supports policy maintenance, audit evidence collection, and GRC process automation across PCI DSS, SOC 1/2, and HIPAA.

You will collaborate with IT, Legal, and operations to improve compliance visibility. Ideal candidates have a foundational GRC or security background, strong English and Spanish, and a proactive attitude to grow within a structured environment.