IT PRC Methodology Lead — GRC & Risk Controls

EY; Ciudad de México; On-site; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Continuous learning

Flexible working arrangements

Diverse and inclusive culture

Job summary

EY seeks a Policy, Risk and Control (PRC) Methodology Specialist in Mexico City to administer and enhance the IT PRC Framework, aligning IT risk domains, processes, and controls with global GRC standards. You will collaborate with global teams to evolve methodology offerings and strengthen control coverage across programs.

You will communicate complex concepts, build stakeholder relationships, and support adoption of the PRC framework, including automation and GRC tooling, to improve risk

Qualifications

• 3 - 5 years of progressive experience in Information Technology, Information Security, Security Compliance, IT Audit, IT Risk Management, or related disciplines.
• Advanced degree in Computer Science, Information Security, Risk Management, or a related field, or equivalent work experience.
• Demonstrated knowledge of GRC principles and their application within technology, information security, and risk management environments, along with familiarity with Archer or comparable GRC platforms and tools.
• Working knowledge of industry standards and control frameworks (ISO, NIST, COBIT, PCI DSS) and regulatory requirements (GDPR, DORA, CRA, SOX).
• Experience applying risk and control concepts to evaluate control effectiveness and suggest improvements.
• Strong English language skills, including written, verbal, and presentation abilities.

Responsibilities

• Serve as a subject matter expert in IT risk management, governance, compliance, and control frameworks.
• Lead continuous improvement of the IT PRC Framework operating model through research into industry trends and regulatory changes.
• Identify and recommend process improvements and documentation across lifecycles.
• Develop cross-mappings of PRC common controls against Information Security policies and standards.
• Partner with Risk, Control, Compliance, and Assessment teams to support control gap assessments.
• Support the integration and use of GRC technologies and tools, including the Unified Compliance tool.
• Facilitate stakeholder engagement to influence methodology adoption and risk practices.
• Promote a culture of risk awareness through Information Security & Awareness campaigns.

Skills

Information Security

GRC methodologies

Analytical thinking

Communication skills

Cross-functional collaboration

Organizational skills

Automation

Learning new technologies

Education

Advanced degree in Computer Science, Information Security, Risk Management or related field

Tools

Archer

Job description

EY seeks a Policy, Risk and Control (PRC) Methodology Specialist in Mexico City to administer and enhance the IT PRC Framework, aligning IT risk domains, processes, and controls with global GRC standards. You will collaborate with global teams to evolve methodology offerings and strengthen control coverage across programs.

You will communicate complex concepts, build stakeholder relationships, and support adoption of the PRC framework, including automation and GRC tooling, to improve risk