{"id":3916016,"url":"https://alion.io/job/ex-squared-senior-it-audit-grc-specialist","title":"Senior IT Audit & GRC Specialist","company":{"id":4468346,"name":"EX Squared","domain":"exsquared.com","url":"https://alion.io/company/exsquared-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Copilot","optional":false},{"name":"Gemini","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-04T00:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-11T17:16:20Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"At EX Squared LATAM, we partner with leading organizations to connect experienced professionals with high-impact career opportunities. We are currently supporting a globally recognized professional services organization in hiring a Senior IT Audit & GRC Specialistfor its Mexico team.\nThe selected professional will be hired directly by the client under local Mexican payroll and will support internal audit engagements involving technology, information security, IT controls, risk management, and compliance.\nRole Overview\nThe Senior IT Audit & GRC Specialist will support teams undergoing internal audits by coordinating audit requests, reviewing evidence, facilitating communication between auditors and auditees, and monitoring the remediation of identified findings.\nThis role will serve as a liaison between auditors, technology teams, business stakeholders, Issue Owners, and leadership. The selected professional will help translate audit requirements into clear actions, maintain accurate documentation, monitor remediation plans, and provide timely information for leadership reporting.\nSuccess in this position requires a strong understanding of IT audit methodologies, technology controls, risk management, compliance requirements, and recognized control frameworks.\nOfficial Title\nSenior Associate - Security Governance, Risk & Compliance\nLocation\nMexico. Priority will be given to candidates based in Mexico City or Guadalajara who can work under a hybrid model. Candidates in other Mexican cities may be considered for remote work based on business needs.\nContract Duration\nPermanent, full-time position hired directly by the client under Mexican payroll.\nWorking Hours\nMonday through Friday, either 7:00 a.m.-4:00 p.m. or 8:00 a.m.-5:00 p.m. Eastern Time.\nLanguage Requirement\nAdvanced English.\nWhat You’ll Do\nSupport teams undergoing internal technology, security, risk, and compliance audits.\nCoordinate the end-to-end audit-support process, including audit requests, evidence collection, documentation reviews, consultations, meetings, and engagement logistics.\nTranslate audit requests and technical requirements into clear actions for business and technology stakeholders.\nCollect, organize, and review audit evidence to confirm that it is complete, accurate, relevant, and ready for submission.\nCoordinate artifact requests and communication between auditors, auditees, technology teams, and business stakeholders.\nProvide guidance to teams regarding audit expectations, supporting documentation, response timelines, and remediation requirements.\nSupport the development of Plans of Action and Milestones to remediate internal audit findings.\nMonitor remediation activities, milestones, evidence, Issue Owners, and target completion dates.\nEscalate concerns when findings or remediation activities are at risk of missing committed deadlines.\nApply risk principles when working with IT teams and assigned business functions undergoing internal audits.\nAnalyze IT and security procedures to evaluate compliance with internal policies, control requirements, and recognized frameworks.\nBuild trusted relationships with auditors, business leadership, Issue Owners, and technical stakeholders.\nPromote a collaborative and transparent audit process through proactive communication and disciplined follow-up.\nFacilitate meetings, publish meeting notes and action items, update project documentation, and monitor assigned commitments.\nParticipate in system and tracker updates to ensure audit and remediation information remains current.\nProvide accurate, timely, and comprehensive information for monthly and quarterly leadership reports and presentations.\nIndependently manage small projects or participate as an active member of larger project teams.\nWhat You’ll Bring\nBachelor’s degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business Administration, or a related field.\nThree to five years of experience in IT Audit, Internal Audit, IT Assurance, Technology Risk, or a related area.\nExperience working within a large, complex, regulated, or professional services environment.\nPractical experience with compliance, audit methodologies, IT control testing, issue investigation, issue reporting, and Issue Management.\nExperience analyzing, interpreting, and assessing IT and security procedures for compliance with policies and control requirements.\nExperience collecting, reviewing, and organizing audit evidence and supporting documentation.\nExperience coordinating with auditors, auditees, technology teams, business stakeholders, and Issue Owners.\nUnderstanding of audit findings, corrective actions, remediation plans, supporting evidence, and closure requirements.\nKnowledge of recognized control and risk frameworks such as NIST, COSO, and ISO 27001.\nStrong analytical, problem-solving, organizational, and independent judgment skills.\nStrong verbal and written communication skills, including the ability to communicate clearly with senior leadership.\nAbility to manage multiple audit requests, stakeholders, deliverables, and deadlines simultaneously.\nAdvanced English proficiency.\nWhat Will Make You Stand Out\nExperience providing direct audit support to teams or business functions undergoing internal audits.\nExperience working in IT assurance within a large professional services organization.\nExperience developing or coordinating Plans of Action and Milestones.\nExperience preparing leadership reports, audit summaries, remediation updates, or executive presentations.\nFamiliarity with artificial intelligence tools such as Google Gemini or Microsoft Copilot.\nOne or more of the following certifications:Certified Information Systems Auditor - CISA.\nCertified in Risk and Information Systems Control - CRISC.\nCertified Information Systems Security Professional - CISSP.\n\nWhat the Client Offers\nCareer growth opportunities.\nMeal and grocery vouchers.\nSavings fund.\nFinancial support for courses and professional certifications.\nRemote-work allowance, when applicable.","description_format":"text","description_chars":6027,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Growth opportunities"],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","LLM & Generative AI","Digital Goods"],"lifecycle":[{"event":"open","at":"2026-11-07T12:18:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":29,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/ex-squared-senior-it-audit-grc-specialist","json_url":"https://alion.io/job/ex-squared-senior-it-audit-grc-specialist.json","meta":{"generated_at":"2026-11-11T21:00:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":41087,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4468346},"rest":"https://alion.io/mcp/rest/get_company?id=4468346"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fex-squared-senior-it-audit-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fex-squared-senior-it-audit-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fex-squared-senior-it-audit-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ex-squared-senior-it-audit-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fex-squared-senior-it-audit-grc-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3916016}},{"tool":"search_jobs","arguments":{"company":"exsquared.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3916016},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}