IT PRC Methodology Lead — Risk & GRC

EY; Miguel Hidalgo; On-site; MXN 600,000 - 900,000; Full time

Job summary

EY is seeking a Policy, Risk, and Control (PRC) Methodology Specialist to administer and advance the IT PRC Framework within the Global Information Security program. You will align IT risk domains, controls, and policies with industry standards and regulatory mandates, partnering with global teams to enable secure, compliant solutions.

You will apply methodology expertise across risk and control environments, collaborating with stakeholders to improve coverage, adoption, and consistency, while

Qualifications

• 3–5 years of progressive experience in IT, information security, security compliance, IT risk management, or related disciplines.
• Advanced degree in Computer Science, Information Security, Risk Management or related field, or equivalent work experience.
• Knowledge of GRC principles and experience with Archer or comparable platforms; familiarity with ISO, NIST, COBIT, PCI DSS, GDPR, DORA, SOX.

Responsibilities

• Serve as a subject matter expert in IT risk management, governance, compliance, and control frameworks; promote consistency in interpretation and adoption of IT PRC Framework.
• Lead continuous improvement of the IT PRC Framework operating model through industry research and regulatory changes.
• Identify and recommend process improvements, documentation, and program artifacts throughout lifecycles.
• Develop cross-mappings of PRC common controls against Information Security policies and standards.
• Support control gap assessments and drive alignment among risks, controls, and regulatory requirements.
• Assist in adoption and use of GRC tools to strengthen assessment activities and risk management processes.
• Facilitate stakeholder engagement to influence methodology adoption and risk culture.
• Promote risk awareness through risk-focused campaigns and education across teams.

Skills

Information Security

IT Risk Management

GRC Methodologies

Analytical Skills

Communication Skills

Cross-functional Teams

Organizational Skills

Automation Skills

Learning New Tech

English Proficiency

Education

Advanced degree

Computer Science

Information Security

Risk Management

Tools

Archer

Job description

EY is seeking a Policy, Risk, and Control (PRC) Methodology Specialist to administer and advance the IT PRC Framework within the Global Information Security program. You will align IT risk domains, controls, and policies with industry standards and regulatory mandates, partnering with global teams to enable secure, compliant solutions.

You will apply methodology expertise across risk and control environments, collaborating with stakeholders to improve coverage, adoption, and consistency, while