Senior IT Audit & GRC Specialist

EX Squared; Ciudad de México; Hybrid; MXN 520,000 - 760,000; Full time

Benefits offered by this job

Meal and grocery vouchers

Savings fund

Financial support for courses and pro.

Job summary

EX Squared LATAM is seeking a Senior IT Audit & GRC Specialist for its Mexico team. The role involves coordinating audit requests, collecting evidence, and guiding remediation activities within IT, security, and risk domains.

You will liaise between auditors, technology teams, and leadership to ensure timely, compliant audit outcomes. The position is permanent and full-time, with a hybrid model based in Mexico (Mexico City or Guadalajara preferred; remote options considered).

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business Administration, or a related field.
• 3–5 years of IT Audit, Internal Audit, IT Assurance, Technology Risk, or related experience.
• Experience in large, complex, regulated or professional services environments.
• Knowledge of compliance, audit methodologies, IT control testing, issue investigation and remediation.
• Ability to assess IT and security procedures for policy and control compliance.
• Experience collecting, reviewing, and organizing audit evidence.
• Experience coordinating with auditors, auditees, technology teams and stakeholders.
• Understanding of audit findings, remediation plans, evidence, and closure requirements.
• Familiarity with control frameworks such as NIST, COSO, ISO 27001.
• Strong communication skills and ability to interact with senior leadership.
• Proficiency in Advanced English.

Responsibilities

• Support internal technology, security, risk and compliance audits.
• Coordinate end-to-end audit-support processes and engagement logistics.
• Translate audit requirements into actions for business and tech stakeholders.
• Collect and review audit evidence for completeness and accuracy.
• Coordinate artifact requests and communications among auditors and auditees.
• Provide guidance on audit expectations, timelines, and remediation needs.
• Support development of Plans of Action and Milestones for remediation.
• Monitor remediation milestones, evidence, and deadlines.
• Escalate concerns when deadlines are at risk.
• Apply risk principles when working with IT teams and business functions.
• Analyze IT and security procedures for compliance with policies and frameworks.
• Build relationships with auditors, leadership, and stakeholders.
• Promote collaborative audit processes with proactive communication.

Skills

Analytical skills

Problem solving

Organizational skills

Independent judgment

Verbal and written communication

Advanced English

Education

Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business Administration, or related field

Tools

CISA

CRISC

CISSP

Google Gemini

Microsoft Copilot

Job description

At EX Squared LATAM, we partner with leading organizations to connect experienced professionals with high-impact career opportunities. We are currently supporting a globally recognized professional services organization in hiring a Senior IT Audit & GRC Specialist for its Mexico team.

The selected professional will be hired directly by the client under local Mexican payroll and will support internal audit engagements involving technology, information security, IT controls, risk management, and compliance.

Role Overview

The Senior IT Audit & GRC Specialist will support teams undergoing internal audits by coordinating audit requests, reviewing evidence, facilitating communication between auditors and auditees, and monitoring the remediation of identified findings.

This role will serve as a liaison between auditors, technology teams, business stakeholders, Issue Owners, and leadership. The selected professional will help translate audit requirements into clear actions, maintain accurate documentation, monitor remediation plans, and provide timely information for leadership reporting.

Success in this position requires a strong understanding of IT audit methodologies, technology controls, risk management, compliance requirements, and recognized control frameworks.

Official Title

Senior Associate – Security Governance, Risk & Compliance

Location

Mexico. Priority will be given to candidates based in Mexico City or Guadalajara who can work under a hybrid model. Candidates in other Mexican cities may be considered for remote work based on business needs.

Contract Duration

Permanent, full-time position hired directly by the client under Mexican payroll.

Working Hours

Monday through Friday, either 7:00 a.m.–4:00 p.m. or 8:00 a.m.–5:00 p.m. Eastern Time.

Language Requirement

Advanced English.

What You’ll Do

• Support teams undergoing internal technology, security, risk, and compliance audits.
• Coordinate the end-to-end audit-support process, including audit requests, evidence collection, documentation reviews, consultations, meetings, and engagement logistics.
• Translate audit requests and technical requirements into clear actions for business and technology stakeholders.
• Collect, organize, and review audit evidence to confirm that it is complete, accurate, relevant, and ready for submission.
• Coordinate artifact requests and communication between auditors, auditees, technology teams, and business stakeholders.
• Provide guidance to teams regarding audit expectations, supporting documentation, response timelines, and remediation requirements.
• Support the development of Plans of Action and Milestones to remediate internal audit findings.
• Monitor remediation activities, milestones, evidence, Issue Owners, and target completion dates.
• Escalate concerns when findings or remediation activities are at risk of missing committed deadlines.
• Apply risk principles when working with IT teams and assigned business functions undergoing internal audits.
• Analyze IT and security procedures to evaluate compliance with internal policies, control requirements, and recognized frameworks.
• Build trusted relationships with auditors, business leadership, Issue Owners, and technical stakeholders.
• Promote a collaborative and transparent audit process through proactive communication and disciplined follow-up.
• Facilitate meetings, publish meeting notes and action items, update project documentation, and monitor assigned commitments.
• Participate in system and tracker updates to ensure audit and remediation information remains current.
• Provide accurate, timely, and comprehensive information for monthly and quarterly leadership reports and presentations.
• Independently manage small projects or participate as an active member of larger project teams.

What You’ll Bring

• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business Administration, or a related field.
• Three to five years of experience in IT Audit, Internal Audit, IT Assurance, Technology Risk, or a related area.
• Experience working within a large, complex, regulated, or professional services environment.
• Practical experience with compliance, audit methodologies, IT control testing, issue investigation, issue reporting, and Issue Management.
• Experience analyzing, interpreting, and assessing IT and security procedures for compliance with policies and control requirements.
• Experience collecting, reviewing, and organizing audit evidence and supporting documentation.
• Experience coordinating with auditors, auditees, technology teams, business stakeholders, and Issue Owners.
• Understanding of audit findings, corrective actions, remediation plans, supporting evidence, and closure requirements.
• Knowledge of recognized control and risk frameworks such as NIST, COSO, and ISO 27001.
• Strong analytical, problem-solving, organizational, and independent judgment skills.
• Strong verbal and written communication skills, including the ability to communicate clearly with senior leadership.
• Ability to manage multiple audit requests, stakeholders, deliverables, and deadlines simultaneously.
• Advanced English proficiency.

What Will Make You Stand Out

• Experience providing direct audit support to teams or business functions undergoing internal audits.
• Experience working in IT assurance within a large professional services organization.
• Experience developing or coordinating Plans of Action and Milestones.
• Experience preparing leadership reports, audit summaries, remediation updates, or executive presentations.
• Familiarity with artificial intelligence tools such as Google Gemini or Microsoft Copilot.
• One or more of the following certifications:
  • Certified Information Systems Auditor – CISA.
  • Certified in Risk and Information Systems Control – CRISC.
  • Certified Information Systems Security Professional – CISSP.

What the Client Offers

• Career growth opportunities.
• Meal and grocery vouchers.
• Savings fund.
• Financial support for courses and professional certifications.
• Remote-work allowance, when applicable.