Information System Risk Management Analyst

Divelement; México; A distancia; MXN 1.021.000 - 1.702.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

USD Salary Compensation

100% Remote Work

Professional Growth

Team Building Activities

Team Culture

Descripción de la vacante

A global consultancy is seeking an Information System Risk Management Analyst to strengthen clients' IT control environments. In this remote role, you will conduct IT risk assessments, support SOX compliance, and implement effective IT controls. Ideal candidates have a Bachelor's degree and 2-5 years of relevant experience. Join us to work on diverse projects and collaborate with a supportive team dedicated to continuous improvement.

Formación

• 2-5 years of experience in IT audit, SOX, SOC, or cybersecurity assessments.
• Familiarity with cloud platforms like AWS and Azure.
• Professional certifications such as CISA, CISSP, CPA, or CIA are a plus.
• Experience with cloud platforms (AWS, Azure) and operating systems.
• Familiarity with cybersecurity frameworks (NIST, ISO 27001, COBIT, etc.).
• Professional certifications such as CISA, CISSP, CPA, or CIA are a plus.
• Excellent analytical, organizational, and communication skills.
• Advanced Excel and documentation skills.

Responsabilidades

• Support SOX compliance, internal audits, and SOC 1/2 readiness assessments.
• Conduct IT risk assessments and cybersecurity evaluations.
• Enhance IT General Controls (ITGCs) and audit cloud environments.
• Audit cloud and network environments, including AWS, Azure, and Active Directory.
• Deliver data-driven, actionable insights to strengthen clients’ control frameworks.
• Collaborate with clients and internal teams to resolve findings, improve controls, and ensure ongoing compliance.
• Assist in developing risk mitigation plans and process documentation to support audit readiness.
• Monitor and test the effectiveness of existing IT controls and recommend continuous improvements.

Conocimientos

Analytical thinking

IT General Controls (ITGCs)

Communication skills

Cloud platforms (AWS, Azure)

Organizational skills

Cybersecurity frameworks

Educación

Bachelor's degree in Accounting, Computer Science, MIS, or related field

Herramientas

Excel

Cybersecurity frameworks (NIST, ISO 27001, COBIT)

Active Directory

Descripción del empleo

Overview

We are seeking an Information System Risk Management Analyst (Security Analyst) to join our team and help clients strengthen their IT control environments. This role focuses on IT controls, SOX and SOC compliance and readiness, and cybersecurity risk assessments across diverse industries. You’ll collaborate with clients and senior professionals to identify and manage IT-related risks, develop mitigation strategies, and implement robust controls that reduce the likelihood and impact of potential threats.

If you’re passionate about cybersecurity, compliance, and building resilient information systems, this role is a great opportunity to work on challenging, high-impact projects that make a real difference.

We are a remote-first, cross-functional consultancy that values accountability, collaboration, and continuous improvement. Our approach is built on:

• ✅ Agility and adaptability – tackling diverse client needs across industries.
• ✅ Strong communication and transparency – internally and with clients.
• ✅ Analytical thinking – transforming data into actionable insights.
• ✅ Autonomy – each team member takes ownership of their work and outcomes.

You’re an analytical thinker with a strong foundation in IT controls and risk management. You’re passionate about cybersecurity, compliance, and continuous improvement. You enjoy solving complex problems, working directly with clients, and helping organizations build trust through secure and compliant systems. You thrive in an environment that values curiosity, learning, and collaboration.

Responsibilities

• Support SOX compliance, internal audits, and SOC 1/2 readiness assessments.
• Conduct IT risk assessments and cybersecurity evaluations to identify vulnerabilities and control gaps.
• Evaluate, design, and enhance IT General Controls (ITGCs).
• Audit cloud and network environments, including AWS, Azure, and Active Directory.
• Deliver data-driven, actionable insights to strengthen clients’ control frameworks.
• Collaborate with clients and internal teams to resolve findings, improve controls, and ensure ongoing compliance.
• Assist in developing risk mitigation plans and process documentation to support audit readiness.
• Monitor and test the effectiveness of existing IT controls and recommend continuous improvements.

Qualifications

• ✅ Bachelor’s degree in Accounting, Computer Science, MIS, or related field.
• ✅ 2–5 years of experience in IT audit, SOX, SOC, or cybersecurity assessments.
• ✅ Strong understanding of IT General Controls (ITGCs) and audit methodologies.
• ✅ Experience working with cloud platforms (AWS, Azure) and operating systems.
• ✅ Familiarity with cybersecurity frameworks (NIST, ISO 27001, COBIT, etc.).
• ✅ Professional certifications such as CISA, CISSP, CPA, or CIA are a plus.
• ✅ Excellent analytical, organizational, and communication skills.
• ✅ Advanced Excel and documentation skills.
• ✅ Client-oriented mindset and ability to work collaboratively in cross-functional teams.

Benefits

• 💎 USD Salary Compensation
• 🌎 100% Remote Work – work from anywhere in the world!
• 📈 Challenging & Impactful Projects – collaborate with diverse clients across industries.
• 🚀 Professional Growth – gain exposure to multiple frameworks (SOX, SOC, ITGC, cybersecurity).
• 🤝 Supportive & Agile Team Culture – partner with experienced professionals who care about your success.
• 👊👊 Team Building Activities – you don’t just join a company; you join a community of professionals eager to collaborate and grow together.

Ready to apply? If you’re passionate about IT risk management, compliance, and cybersecurity — and you want to work in a collaborative, remote-first environment — we’d love to hear from you. Apply now and help organizations strengthen their information security posture with Divelement.