GRC Specialist

Cognizant; Región Centro; Híbrido; MXN 400.000 - 700.000; Jornada completa

Descripción de la vacante

Cognizant in Mexico is seeking a mid- to senior-level GRC Specialist to strengthen governance, risk and compliance across the organization. You will support governance policies, risk management processes, and regulatory compliance initiatives, working with cross-functional teams to identify risks and drive remediation.

Hybrid/remote work arrangements are available, and the role emphasizes collaboration with IT, Legal, Internal Audit, and business units in a dynamic digital environment.

Formación

• Bachelor's degree in Information Security, IT, Business Administration, Risk Management, Cybersecurity or related field.
• 3+ years of experience in Governance, Risk & Compliance, Information Security, Audit or related areas.
• Knowledge of risk management methodologies and compliance frameworks.
• Experience supporting audits and regulatory assessments.
• Strong analytical, organizational and communication skills.

Responsabilidades

• Support governance policies, standards and procedures development and maintenance.
• Identify, evaluate and monitor operational, cyber, technology and third-party risks.
• Coordinate evidence collection and documentation for audits and certifications.
• Prepare risk and compliance reports, dashboards and leadership presentations.

Conocimientos

Governance and policy management

Risk assessment and risk analysis

Regulatory compliance

Audit support and remediation

Control testing and monitoring

Project coordination

Stakeholder management

Data analysis and reporting

Documentation management

Educación

Bachelor's degree in Information Security, IT, Business Administration, Risk Management, Cybersecurity

Herramientas

ServiceNow GRC

Archer

OneTrust

AuditBoard

MetricStream

Descripción del empleo

We're hiring! At Cognizant we have an ideal opportunity for you to be part of one of the largest companies in the digital sector worldwide. A Great Place To Work where we look for people who contribute new ideas, experiencing a dynamic and growing environment. At Cognizant we promote an inclusive culture, where we value different perspectives providing career growth and development opportunities. #WelcomeToCognizant

Governance, Risk & Compliance (GRC) Specialist

Position Summary

The Governance, Risk & Compliance (GRC) Specialist is responsible for supporting the organization's governance framework, risk management processes, and compliance initiatives. This role ensures that business operations, technology environments, and security controls align with regulatory requirements, industry standards, and internal policies. The GRC Specialist works closely with cross-functional teams to identify risks, assess controls, drive remediation efforts, and maintain compliance with applicable regulations and frameworks.

Key Responsibilities

Governance

• Support the development, implementation, and maintenance of corporate governance policies, standards, and procedures.
• Assist in establishing and monitoring governance processes to ensure alignment with organizational objectives.
• Facilitate policy reviews and updates based on regulatory changes and business needs.
• Promote awareness of governance and compliance requirements across the organization.

Risk Management

• Conduct risk assessments and maintain risk registers.
• Identify, evaluate, and monitor operational, cyber, technology, and third-party risks.
• Collaborate with stakeholders to develop risk mitigation strategies and remediation plans.
• Track risk treatment activities and provide regular reporting to management.
• Support enterprise risk management (ERM) initiatives.

Compliance

• Monitor compliance with applicable laws, regulations, and industry standards.
• Support internal and external audits, assessments, and compliance reviews.
• Coordinate evidence collection and documentation for audits and certification activities.
• Assist in maintaining compliance with frameworks such as ISO 27001, SOC 2, NIST, GDPR, HIPAA, PCI-DSS, SOX, or other applicable regulations.
• Investigate compliance gaps and recommend corrective actions.

Reporting & Documentation

• Prepare risk and compliance reports, dashboards, and presentations for leadership.
• Maintain accurate documentation of policies, procedures, risk assessments, controls, and audit findings.
• Track compliance metrics and key risk indicators (KRIs).

Stakeholder Collaboration

• Partner with Information Security, IT, Legal, Privacy, Internal Audit, and business teams.
• Provide guidance on compliance requirements and risk management best practices.
• Support vendor risk assessments and third-party compliance reviews.

Required Qualifications

• Bachelor's degree in Information Security, Information Technology, Business Administration, Risk Management, Cybersecurity, or a related field.
• 3+ years of experience in Governance, Risk & Compliance, Information Security, Audit, Risk Management, or related areas.
• Knowledge of risk management methodologies and compliance frameworks.
• Experience supporting audits and regulatory assessments.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple projects and priorities effectively.

Preferred Qualifications

• Professional certifications such as:
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CISSP (Certified Information Systems Security Professional)
• CGRC (Certified in Governance, Risk and Compliance)
• ISO 27001 Lead Implementer or Lead Auditor
• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, AuditBoard, or MetricStream.
• Knowledge of cloud security compliance frameworks (AWS, Azure, Google Cloud).

Required Skills

• Governance and policy management
• Risk assessment and risk analysis
• Regulatory compliance
• Audit support and remediation management
• Control testing and monitoring
• Project coordination
• Stakeholder management
• Data analysis and reporting
• Documentation management

Success Metrics

• Timely completion of risk assessments and compliance reviews.
• Successful support of internal and external audits.
• Reduction of identified compliance gaps and risk exposures.
• Accuracy and completeness of governance and compliance documentation.
• Effective collaboration with stakeholders to drive risk and compliance initiatives.

Location

Hybrid/Remote

Employment Type

Full-Time

Experience Level

Mid-Level to Senior-Level Depending on Business Needs