Senior IT Risk & Controls Lead (Hybrid, Mexico City)

Marsh Mclennan; Xico; Hybrid; MXN 1,200,000 - 1,700,000; Full time

Job summary

Marsh is seeking a Senior IT Risk Management Specialist to join our Mexico City-based hybrid team. You will map existing IT controls, convert designs into testable statements, and maintain an auditable controls library aligned with NIST, policy, and regulatory requirements.

You will mentor a small team of controls specialists and collaborate with IT and business control owners to support audit readiness and automation opportunities.

Qualifications

• Knowledge of regulatory laws impacting global IT organizations.
• Knowledge of information systems, software and security related products and services.
• Knowledge of Security frameworks including NIST CSF, NIST SP800-53 and ISO 27001.
• Experience supporting audit objectives (SOC 1, SOC 2, GS007, SOX).
• An undergraduate or graduate degree in IT Management, Computer Information Systems (CIS), or equivalent.
• Significant experience with Microsoft Office Suite.
• The ability to articulate business/technical requirements to IT teams and business users.
• Excellent verbal and written communication skills (incl. Presentation development)
• Advanced level on English is a must.

Responsibilities

• Identify existing controls through interviews, workshops, and evidence reviews across infrastructure, applications, cloud, identity, change management, and third-party services to document controls.
• Draft control statements and test procedures converting designs into concise criteria and evidence requirements.
• Design and execute enterprise CSA programs to validate controls, collect attestations, review evidence, score design effectiveness, and link CSA to controls library in GRC.
• Review drafted controls with owners and auditors, secure ownership, and finalize control language for repository.
• Prioritize and remediate gaps by triaging undocumented or weak controls and tracking compensating controls or exceptions.
• Coach and scale by mentoring team members and running control identification playbooks to accelerate library population.

Skills

Regulatory knowledge

IT controls / risk management

Audit support

English (advanced)

Communication

Education

IT Management / CIS degree

Tools

Microsoft Office Suite

Job description

Marsh is seeking a Senior IT Risk Management Specialist to join our Mexico City-based hybrid team. You will map existing IT controls, convert designs into testable statements, and maintain an auditable controls library aligned with NIST, policy, and regulatory requirements.

You will mentor a small team of controls specialists and collaborate with IT and business control owners to support audit readiness and automation opportunities.