Senior IT Audit & GRC Specialist

At EX Squared LATAM, we partner with leading organizations to connect experienced professionals with high-impact career opportunities. We are currently supporting a globally recognized professional services organization in hiring a Senior IT Audit & GRC Specialistfor its Mexico team.

The selected professional will be hired directly by the client under local Mexican payroll and will support internal audit engagements involving technology, information security, IT controls, risk management, and compliance.

Role Overview

The Senior IT Audit & GRC Specialist will support teams undergoing internal audits by coordinating audit requests, reviewing evidence, facilitating communication between auditors and auditees, and monitoring the remediation of identified findings.

This role will serve as a liaison between auditors, technology teams, business stakeholders, Issue Owners, and leadership. The selected professional will help translate audit requirements into clear actions, maintain accurate documentation, monitor remediation plans, and provide timely information for leadership reporting.

Success in this position requires a strong understanding of IT audit methodologies, technology controls, risk management, compliance requirements, and recognized control frameworks.

Official Title

Senior Associate - Security Governance, Risk & Compliance

Location

Mexico. Priority will be given to candidates based in Mexico City or Guadalajara who can work under a hybrid model. Candidates in other Mexican cities may be considered for remote work based on business needs.

Contract Duration

Permanent, full-time position hired directly by the client under Mexican payroll.

Working Hours

Monday through Friday, either 7:00 a.m.-4:00 p.m. or 8:00 a.m.-5:00 p.m. Eastern Time.

Language Requirement

Advanced English.

What You’ll Do

• Support teams undergoing internal technology, security, risk, and compliance audits.
• Coordinate the end-to-end audit-support process, including audit requests, evidence collection, documentation reviews, consultations, meetings, and engagement logistics.
• Translate audit requests and technical requirements into clear actions for business and technology stakeholders.
• Collect, organize, and review audit evidence to confirm that it is complete, accurate, relevant, and ready for submission.
• Coordinate artifact requests and communication between auditors, auditees, technology teams, and business stakeholders.
• Provide guidance to teams regarding audit expectations, supporting documentation, response timelines, and remediation requirements.
• Support the development of Plans of Action and Milestones to remediate internal audit findings.
• Monitor remediation activities, milestones, evidence, Issue Owners, and target completion dates.
• Escalate concerns when findings or remediation activities are at risk of missing committed deadlines.
• Apply risk principles when working with IT teams and assigned business functions undergoing internal audits.
• Analyze IT and security procedures to evaluate compliance with internal policies, control requirements, and recognized frameworks.
• Build trusted relationships with auditors, business leadership, Issue Owners, and technical stakeholders.
• Promote a collaborative and transparent audit process through proactive communication and disciplined follow-up.
• Facilitate meetings, publish meeting notes and action items, update project documentation, and monitor assigned commitments.
• Participate in system and tracker updates to ensure audit and remediation information remains current.
• Provide accurate, timely, and comprehensive information for monthly and quarterly leadership reports and presentations.
• Independently manage small projects or participate as an active member of larger project teams.

What You’ll Bring

• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business Administration, or a related field.
• Three to five years of experience in IT Audit, Internal Audit, IT Assurance, Technology Risk, or a related area.
• Experience working within a large, complex, regulated, or professional services environment.
• Practical experience with compliance, audit methodologies, IT control testing, issue investigation, issue reporting, and Issue Management.
• Experience analyzing, interpreting, and assessing IT and security procedures for compliance with policies and control requirements.
• Experience collecting, reviewing, and organizing audit evidence and supporting documentation.
• Experience coordinating with auditors, auditees, technology teams, business stakeholders, and Issue Owners.
• Understanding of audit findings, corrective actions, remediation plans, supporting evidence, and closure requirements.
• Knowledge of recognized control and risk frameworks such as NIST, COSO, and ISO 27001.
• Strong analytical, problem-solving, organizational, and independent judgment skills.
• Strong verbal and written communication skills, including the ability to communicate clearly with senior leadership.
• Ability to manage multiple audit requests, stakeholders, deliverables, and deadlines simultaneously.
• Advanced English proficiency.

What Will Make You Stand Out

• Experience providing direct audit support to teams or business functions undergoing internal audits.
• Experience working in IT assurance within a large professional services organization.
• Experience developing or coordinating Plans of Action and Milestones.
• Experience preparing leadership reports, audit summaries, remediation updates, or executive presentations.
• Familiarity with artificial intelligence tools such as Google Gemini or Microsoft Copilot.
• One or more of the following certifications:
  • Certified Information Systems Auditor - CISA.
  • Certified in Risk and Information Systems Control - CRISC.
  • Certified Information Systems Security Professional - CISSP.

What the Client Offers

• Career growth opportunities.
• Meal and grocery vouchers.
• Savings fund.
• Financial support for courses and professional certifications.
• Remote-work allowance, when applicable.