Senior IT Risk & Controls Lead (Hybrid)

Marsh; Ciudad de México; Hybrid; MXN 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Marsh in Mexico City seeks a Senior IT Risk Management Specialist to join our team. This hybrid role requires three days a week in the office as you identify and document IT controls, convert technical designs into clear control statements, and maintain a centralized controls library mapped to NIST and regulatory requirements.

You will mentor a small team of controls specialists, collaborate with IT and business control owners, and help ensure audit readiness and opportunities for automation

Qualifications

• Undergraduate or graduate degree in IT Management, CIS, or equivalent.
• Knowledge of Sarbanes‑Oxley, NYDFS, CPS 234, PIPL, and related laws.
• Experience supporting audit objectives (SOC 1/2, GS007, SOX).
• Strong communication to translate technical to business audiences.
• Ability to mentor and collaborate with IT and business owners.

Responsibilities

• Identify and document IT controls across infrastructure, applications, cloud, identity, change management, and third‑party services.
• Draft control statements and test procedures from technical designs and documentation.
• Design and run enterprise CSA program and manage evidence reviews and attestations.
• Collaborate with auditors and owners to finalize control language and secure ownership.
• Prioritize gaps, recommend compensating controls, and track remediation.
• Coach and scale the controls team and develop playbooks/templates.

Skills

Regulatory knowledge

Security frameworks

Audit support experience

Communication skills

English proficiency

Team leadership

Education

Bachelor/Master in IT Management or CIS

Tools

Microsoft Office Suite

Job description

Marsh in Mexico City seeks a Senior IT Risk Management Specialist to join our team. This hybrid role requires three days a week in the office as you identify and document IT controls, convert technical designs into clear control statements, and maintain a centralized controls library mapped to NIST and regulatory requirements.

You will mentor a small team of controls specialists, collaborate with IT and business control owners, and help ensure audit readiness and opportunities for automation