MONITORING & FRAUD PREVENTION COORDINATOR

Pluxee; Ciudad de México; Hybrid; MXN 420,000 - 640,000; Full time

Job summary

Pluxee is seeking a Monitoring & Fraud Prevention Coordinator to join our GRC team. This hybrid role in Ciudad de Mexico focuses on developing and maintaining cybersecurity and compliance policies, monitoring KPIs and KRIs, and collaborating with IT, Privacy, Legal, and Compliance to ensure regulatory alignment across countries.

The candidate should have 3–5 years in GRC, with relevant certifications preferred.

Qualifications

• Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or related field.
• 3–5 years of experience in GRC, cybersecurity compliance, or information risk management in multinational/regulated environment.
• Certification preferred: CRISC, ISO 27001 Lead Implementer, CISA or equivalent.
• Familiarity with GRC tools and platforms; strong analytical and documentation skills.

Responsibilities

• Develop, update, and maintain cybersecurity and compliance policies, procedures, and standards.
• Monitor KPIs/KRIs and provide risk posture updates to stakeholders.
• Collaborate with IT, Privacy, Legal, and Compliance to ensure governance.
• Contribute to awareness campaigns and training on cybersecurity and compliance.
• Research evolving GRC practices and regulatory updates.
• Support implementation of GRC initiatives and participate in audits.

Skills

Risk management

GRC frameworks

Regulatory compliance

Policy development

Analytical skills

Documentation

English language

Knowledge of ISO 27001/NIST/GDPR/LGPD

Education

Bachelor’s in Risk Management

Bachelor’s in Business Administration

Bachelor’s in Cybersecurity

Master’s degree preferred

Tools

GRC platforms

Microsoft 365

Job description

MONITORING & FRAUD PREVENTION COORDINATOR### MONITORING & FRAUD PREVENTION COORDINATORSolliciteren: Hybride: Ciudad de Mexico: Full time: Vandaag geplaatst: Einddatum: 30 november 2026 (Nog 25 dagen om te solliciteren): R5973**At Pluxee, we shape the world of employee benefits and engagement by bringing to life a personalized and sustainable employee experience, at work and beyond.**Permanent Regular **Job Description:**The GRC (Governance, Risk, and Compliance) Analyst supports Pluxee’s global cybersecurity, compliance, and risk management initiatives by developing, implementing, and monitoring GRC frameworks. Operating within a dynamic B2B2C environment, this global individual contributor role collaborates across functions to ensure regulatory alignment, policy compliance, and continuous risk mitigation. The role contributes directly to Pluxee’s strategic ambition to be a SMART Leader in employee benefits by embedding robust and responsible governance practices.YOUR NEXT CHALLENGEResponsibilities:1. Policy & Framework DevelopmentDevelop, update, and maintain cybersecurity and compliance-related policies, procedures, and standards.Ensure alignment with global regulatory and industry frameworks (e.g., ISO 27001, NIST, GDPR, LGPD, DORA).Support the continuous improvement and application of Pluxee’s GRC framework.2. Monitoring & ReportingTrack and analyze cybersecurity KPIs and KRIs, providing data-driven insights and risk posture updates to senior stakeholders.Contribute to regular internal reporting and audits, ensuring visibility and transparency on compliance efforts.3. Collaboration & AlignmentCollaborate with cross-functional teams including IT, Privacy, Legal, and Compliance to ensure integrated governance approaches.Support business units in applying policies and resolving GRC-related questions or challenges.4. Awareness & TrainingParticipate in the rollout of awareness campaigns and employee training programs aligned with cybersecurity and compliance priorities.Provide subject matter input to content development for GRC education.5. Research & InnovationConduct research on evolving GRC practices, regulatory updates, and technological advancements.Identify improvement opportunities and recommend enhancements to existing controls and methodologies.6. Operational SupportSupport the implementation of GRC initiatives, tools, and controls across countries and business lines.Provide subject matter input during audits, risk assessments, and control testing activities.YOU ARE A MATCH IF...Education:Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or a related field (Master’s preferred).Work Experience:3–5 years of relevant experience in GRC, cybersecurity compliance, or information risk management in a multinational or regulated environment.Skills & Certifications:Certification preferred: CRISC, ISO 27001 Lead Implementer, CISA, or equivalent.Familiarity with GRC tools and platforms.Strong analytical and documentation skills.Proficiency in Microsoft 365 suite.Languages:For global, regional, or area roles, fluency in English is required. Additional languages such as French, Spanish, Portuguese, or other relevant languages are an advantage.For local country leadership and management roles, fluency in the local language and English is required.For local individual contributor roles, fluency in the local language is required. English is considered an advantage as it supports communication, learning, and collaboration in a multinational context.Working Conditions:For global, regional, or area roles:Hybrid working patterns depending on the host country policies. Collaboration across different countries, functions, and time zones. Travel may be required depending on business needs.For local roles:Hybrid working environment depending on local policies. Collaboration with local business teams and relevant regional or global stakeholders. Occasional travel may be required depending on business needs.Competencies:Risk Management.Policy Development and Implementation.GRC Tools and Technologies.Legal and Regulatory Expertise.Audit.