GRC Analyst - Security & Compliance (Mexico City)

Concord; Ciudad de México; Presencial; MXN 360.000 - 540.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Grocery Vouchers

Internet Bonus

Medical Insurance

Life Insurance

Dental Insurance

Law Benefits

Descripción de la vacante

Concord is seeking a driven GRC Analyst to join our Information Security team in Mexico City. You will help maintain policies, collect audit evidence across PCI DSS, SOC 1, SOC 2, and HIPAA, and contribute to modernizing GRC processes with automation.

The role reports to the CISO and collaborates with IT, Legal, and Operations to strengthen governance, risk management, and compliance across the organization.

Formación

• Foundational understanding of GRC, Information Security, and compliance.
• Familiar with regulatory frameworks within the United States (PCI, SOC, HIPAA preferred).
• Excellent written and verbal communication in English and Spanish.

Responsabilidades

• Policies & Procedures: Assist in maintenance and updating of information security policies and procedures.
• Audit Evidence Collection: Support gathering and organization of audit evidence across PCI DSS, SOC 1, SOC 2, and HIPAA.
• GRC Automation: Help identify manual or repetitive GRC processes and assist automation efforts using AI-powered tools and scripting.
• Documentation: Help document workflows and guides for internal reviews, audits, and day-to-day operations.
• Compliance Monitoring: Track changes in regulatory frameworks and assist in awareness.
• Cross-Functional Collaboration: Work with IT, Legal, Operations, and business units to support compliance.
• Metrics & Reporting: Assist in maintaining GRC dashboards and status reports.

Conocimientos

GRC fundamentals

Information Security

Compliance frameworks

Audit evidence collection

Automation mindset

Documentation

Cross-functional collaboration

Metrics & reporting

Herramientas

Scripting languages

Workflow automation platforms

AI-powered tools

Descripción del empleo

Concord is seeking a driven GRC Analyst to join our Information Security team in Mexico City. You will help maintain policies, collect audit evidence across PCI DSS, SOC 1, SOC 2, and HIPAA, and contribute to modernizing GRC processes with automation.

The role reports to the CISO and collaborates with IT, Legal, and Operations to strengthen governance, risk management, and compliance across the organization.