Senior Associate, Security Governance, Risk & Compliance (GRC)

Job Overview

Are you passionate about IT risk management, audit excellence, and security compliance? We are looking for a Senior Associate, Security Governance, Risk & Compliance (GRC) to support internal audit engagements, strengthen IT controls, and drive the timely resolution of audit findings.

In this role, you will work closely with auditors, technology teams, business stakeholders, and senior leadership to coordinate audit activities, assess compliance, manage remediation plans, and improve the organization's risk and control environment. This is an excellent opportunity for an IT Audit or IT Assurance professional looking to expand their expertise in security governance, risk management, and regulatory compliance.

Key Responsibilities

- Coordinate internal audit activities, including interpreting audit requests, gathering and reviewing evidence, and supporting audit teams and stakeholders throughout the audit lifecycle.
- Facilitate communication between auditors, technology teams, business units, and leadership to ensure efficient audit execution.
- Support IT controls testing and evaluate IT and security procedures against organizational policies and applicable control frameworks.
- Develop and track remediation plans, action items, milestones, and deadlines to ensure timely resolution of audit findings.
- Investigate and document audit issues, monitor progress, and escalate delays or unresolved items to the appropriate stakeholders.
- Maintain accurate audit documentation, evidence records, meeting notes,



and issue trackers.
- Prepare monthly and quarterly reports and presentations to communicate audit progress, outstanding issues, and remediation status to leadership.
- Manage smaller audit-related projects independently while contributing to broader risk and compliance initiatives.

Requirements

- Bachelor's degree.
- 3–5 years of professional experience in IT Audit, Internal Audit, or IT Assurance, preferably within a large professional services environment.
- Hands-on experience with audit methodologies, IT controls testing, audit evidence review, and issue management.
- Knowledge of IT risk management, security governance, and control frameworks such as NIST, COSO, or ISO 27001.
- Experience evaluating IT and security procedures for compliance with policies and controls.
- Strong analytical, organizational, and problem-solving skills, with exceptional attention to detail.
- Excellent written and verbal communication skills, including the ability to interact effectively with senior leadership and cross-functional teams.
- Ability to manage multiple priorities, exercise independent judgment, and deliver high-quality results within established deadlines.

Preferred Qualifications

- Experience directly supporting business teams during internal audit engagements.
- Professional certifications such as CISA, CRISC, or CISSP.
- Familiarity with AI-powered productivity tools such as Google Gemini or Microsoft Copilot.

What do we offer? Law benefits and additional compensations

100% payroll-based compensation (fully declared salary)

📌 Senior Associate, Security Governance, Risk and Compliance (Ciudad de México)
🏢 Importante Empresa Del Sector
📍 Ciudad de México