IT PRC Methodology Analyst - Risk & GRC Enablement

EY; Ciudad de México; On-site; MXN 450,000 - 630,000; Full time

Benefits offered by this job

Flexible working arrangements

Global opportunities

Job summary

EY in Mexico City seeks a Policy, Risk and Control (PRC) Methodology Analyst to support the IT PRC Framework governance within EY's Global Information Security program. You will collaborate across teams to mature risk and control methodologies and ensure alignment with GRC tooling.

Ideal candidates have 2+ years in information security or risk, strong English, and experience with governance frameworks and IT risk management; familiarity with ISO, NIST, PCI DSS is a plus.

Qualifications

• 2+ years of experience in IT information security, risk management, or IT audit.
• Familiarity with governance, risk and compliance models and industry standards (ISO/NIST/COBIT/PCI DSS).
• Excellent written and verbal communication in English.

Responsibilities

• Coordinate and maintain the IT PRC Framework and related risk and control methodologies.
• Collaborate with global teams to align PRC with GRC tooling and policies.
• Assess regulatory changes and map controls to applicable policies and standards.
• Cross-map PRC controls with policy statements to promote standardization.
• Support risk assessments and control mapping activities.

Skills

IT risk management

Information Security

English language

Communication

Analytical skills

Collaboration

Education

Advanced degree in Computer Science or Information Security

Tools

Microsoft Office

Power BI

M365

Job description

EY in Mexico City seeks a Policy, Risk and Control (PRC) Methodology Analyst to support the IT PRC Framework governance within EY's Global Information Security program. You will collaborate across teams to mature risk and control methodologies and ensure alignment with GRC tooling.

Ideal candidates have 2+ years in information security or risk, strong English, and experience with governance frameworks and IT risk management; familiarity with ISO, NIST, PCI DSS is a plus.