Hybrid Governance & AI‑Driven Compliance Analyst

Refinitiv; Ciudad de México; Híbrido; MXN 600.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid Work Model

Flexible work policy

Descripción de la vacante

Thomson Reuters in Mexico City is hiring for a hybrid IT audit and compliance role. You will support control testing and audit programs while gaining exposure to automation and AI‑enabled workflows.

Collaborate with senior analysts, control owners, ERM, Finance and IT teams to test controls, collect evidence, and report on effectiveness across the multi‑framework portfolio. Preferred candidates have 1–3 years in SoX/ITGC, SOC2, PCI DSS, or ISO frameworks, plus familiarity with GRC tools;

Formación

• 1–3 years of relevant experience in SoX/ITGC, SOC2, PCI DSS, or ISO frameworks within internal audit, advisory, consulting, or governance & compliance.
• Exposure to control testing or IT‑IS assessment work.
• Familiarity with security frameworks and reporting.

Responsabilidades

• Support control testing & audit activities across multiple frameworks, communicating requirements to control owners and reviewing evidence.
• Assist in liaising for internal and external audits; document deficiencies and support remediation tracking.
• Collaborate with ERM, Finance, and IT teams to track remediation and report audit results to management.

Conocimientos

SoX ITGC

SOC2

PCI DSS

ISO frameworks

GRC familiarity

English + Spanish

Educación

Bachelor’s degree or equivalent

Herramientas

GRC platforms

Descripción del empleo

Thomson Reuters in Mexico City is hiring for a hybrid IT audit and compliance role. You will support control testing and audit programs while gaining exposure to automation and AI‑enabled workflows.

Collaborate with senior analysts, control owners, ERM, Finance and IT teams to test controls, collect evidence, and report on effectiveness across the multi‑framework portfolio. Preferred candidates have 1–3 years in SoX/ITGC, SOC2, PCI DSS, or ISO frameworks, plus familiarity with GRC tools;