GRC Specialist: Enterprise ERP Security & Compliance

CIMMYT; México; On-site; MXN 600,000 - 900,000; Full time

Benefits offered by this job

Year-end bonus/40 days

Vacation premium/56%

Life and medical insurance

Savings fund

Employee discounts

Job summary

CIMMYT is seeking a GRC Specialist to lead governance, risk, and compliance across enterprise applications including Dynamics 365 and Power Platform. You will oversee access management, SoD controls, license reconciliation, and audit readiness in a global non-profit setting.

The role requires 5+ years in IT GRC or IT audit, strong analytical skills, and English proficiency. Prior experience with ERP security and governance is essential.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, or related field.
• Minimum of 5 years IT GRC or IT audit experience.
• Hands-on Dynamics 365 security model experience.
• Experience with Power Platform governance and license reconciliation.
• Knowledge of data protection laws and ISO 27001/NIST/COBIT frameworks.
• Certifications (CISA/CRISC/CISM/CIPP) are advantageous.
• Strong analytical, reporting, and dashboard skills (Power BI advantageous).
• Full professional proficiency in English.
• Familiarity with ticketing tools and D365 administration.
• Strong stakeholder management without direct line authority.

Responsibilities

• Own and operate full lifecycle Access Management across platforms.
• Maintain privileged access elevation model and logs per platform.
• Maintain cross-platform SoD conflict matrix and risk reports.
• Review accounts and reconcile reclaimed accounts to licenses.
• Maintain entitlement register and license reconciliation.
• Maintain data inventory, retention schedules, and DPIA handling.
• Maintain ITGC matrix and drive remediation actions.
• Keep audit-ready evidence and support audits.
• Maintain GRC policy and ERP/IT risk registers.
• Assess interface controls and vendor access environments.
• Operate exception register and train control owners.
• Deliver monthly progress reports and quarterly GRC dashboard.

Skills

IT GRC

Stakeholder management

English proficiency

Analytical skills

Communication skills

Education

Bachelor’s degree in Information Systems / Computer Science

Certifications advantageous (CISA, CRISC, CISM, CIPP)

Tools

Dynamics 365 security model

Power Platform governance

Power BI

GRC tools (Pathlock, Fastpath, SAP GRC, ServiceNow IRM)

D365 administration

Job description

CIMMYT is seeking a GRC Specialist to lead governance, risk, and compliance across enterprise applications including Dynamics 365 and Power Platform. You will oversee access management, SoD controls, license reconciliation, and audit readiness in a global non-profit setting.

The role requires 5+ years in IT GRC or IT audit, strong analytical skills, and English proficiency. Prior experience with ERP security and governance is essential.