Security Auditor Sr

Security Auditor Sr.

Role Purpose:

The Cybersecurity Governance, Risk & Compliance (GRC) organization is seeking a hands-on analyst to improve the quality, completeness, and usability of GRC data and operational documentation across the organization.

This role will work across GRC teams on small, clearly defined assignments that can be completed quickly and independently. The primary focus will be ServiceNow IRM data analysis and remediation, data integrity, reporting readiness, and business process documentation.

Primary Responsibilities:

Data Quality & Analytics

• Analyze GRC datasets to identify missing, incomplete, duplicate, inconsistent, or inaccurate information.
• Perform targeted data remediation and normalization in ServiceNow IRM based on defined business rules.
• Compare data across ServiceNow, Excel, SharePoint/Confluence, or other approved sources to identify discrepancies.
• Perform data profiling, reconciliation, validation, and quality checks before and after remediation.
• Create repeatable queries, spreadsheets, reports, or analysis that help GRC teams identify data-quality problems.

ServiceNow IRM

• Navigate and work effectively within ServiceNow Integrated Risk Management.
• Review and update records across areas such as TPRM/vendor records, risks, issues, controls, entities, assessments, and related GRC data.
• Research data anomalies and determine where records do not align with defined business rules or source information.
• Execute approved bulk or individual data-cleanup activities.
• Validate remediation results and identify remaining exceptions for GRC SMEs to resolve.
• Document recurring data-quality problems and recommend controls/checks that can help prevent recurrence.

Business Process Documentation

• Work directly with a GRC team for short documentation sprints to understand an existing process and turn that knowledge into usable documentation.
• Create and update playbooks, runbooks, procedures, process flows, job aids, business requirements, data dictionaries, and operating documentation.
• Translate conversations with SMEs into clear, concise, repeatable processes.
• Identify unclear handoffs, missing process steps, or undocumented business rules and work with SMEs to clarify them.
• Maintain documentation in SharePoint, Confluence, Word, or other established GRC repositories.

Qualifications:

• 4-8 years of relevant experience in cybersecurity, IT governance, or a related field.
• Advanced English proficiency is required.
• Strong skills in ServiceNow IRM, data analysis, and business process documentation.
• Familiarity with standards such as COBIT, ISO 27000, ITIL, NIST, and PCI DSS.
• Proficiency in Microsoft Windows OS and Office 365.
• Excellent problem-solving, critical thinking, and collaboration skills.
• Ethical mindset and strong customer service orientation.

Location:

This position is based in Mexico.