Senior IT Risk & Controls Leader (Hybrid – Mexico City)

Marsh Agency; Ciudad de México; Hybrid; MXN 900,000 - 1,300,000; Full time

Benefits offered by this job

Professional development opportunities

Inclusive culture

Career opportunity

Job summary

Marsh is seeking a Senior IT Risk Management Specialist to join our team in Mexico City. This hybrid position requires a minimum of three days in the office weekly.

You will discover and catalog IT controls, translate technical implementations into clear control statements, and maintain a centralized, auditable controls library mapped to NIST frameworks and applicable regulations. You will mentor a small team, collaborate with IT and business control owners, and drive audit readiness and

Qualifications

• Knowledge of regulatory laws impacting global IT operations (SOX, NYDFS, CPS 234).
• Experience with IT systems, security products, and services.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001.
• Experience supporting audit objectives (SOC 1/2, SOX).
• Degree in IT Management, CIS, or equivalent.

Responsibilities

• Identify and document existing controls across infrastructure, apps, cloud, and third‑party services.
• Draft control statements and test procedures with clear criteria and evidence requirements.
• Design and run a CSA program linked to controls in the GRC system.
• Review controls with owners and auditors and finalize control language.
• Triage gaps, propose compensating controls, and track remediation.
• Coach team and scale control identification playbooks and templates.

Skills

Regulatory compliance

NIST CSF

ISO 27001

SOX / SOC

English proficiency

Education

IT Management/CIS degree

Tools

GRC tools

Job description

Marsh is seeking a Senior IT Risk Management Specialist to join our team in Mexico City. This hybrid position requires a minimum of three days in the office weekly.

You will discover and catalog IT controls, translate technical implementations into clear control statements, and maintain a centralized, auditable controls library mapped to NIST frameworks and applicable regulations. You will mentor a small team, collaborate with IT and business control owners, and drive audit readiness and