Senior IT Audit & GRC Specialist
EX Squared is hiring a Senior IT Audit & GRC Specialist (hired directly by a global professional-services client) for its Mexico team. Day to day: coordinate audit requests and evidence, liaise between auditors and technology/business teams, and track remediation of findings using IT audit, risk, and compliance frameworks like NIST, COSO, and ISO 27001.
- Compensation
- Not disclosed
- Location
- Ciudad de Mexico, CDMX, Mexico
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in IT, Cybersecurity, Risk Management, Accounting, Business Administration, or related field
- 3-5 years of experience in IT Audit, Internal Audit, IT Assurance, Technology Risk, or related area
- Experience working within a large, complex, regulated, or professional services environment
- Practical experience with compliance, audit methodologies, IT control testing, issue investigation, issue reporting, and Issue Management
- Experience analyzing, interpreting, and assessing IT and security procedures for compliance with policies and control requirements
- Experience collecting, reviewing, and organizing audit evidence and supporting documentation
- Experience coordinating with auditors, auditees, technology teams, business stakeholders, and Issue Owners
- Understanding of audit findings, corrective actions, remediation plans, supporting evidence, and closure requirements
- Knowledge of recognized control and risk frameworks such as NIST, COSO, and ISO 27001
- Strong analytical, problem-solving, organizational, and independent judgment skills
- Strong verbal and written communication skills, including with senior leadership
- Ability to manage multiple audit requests, stakeholders, deliverables, and deadlines simultaneously
- Advanced English proficiency
Nice to have
- Experience providing direct audit support to teams or business functions undergoing internal audits
- Experience working in IT assurance within a large professional services organization
- Experience developing or coordinating Plans of Action and Milestones
- Experience preparing leadership reports, audit summaries, remediation updates, or executive presentations
- Familiarity with AI tools such as Google Gemini or Microsoft Copilot
- Certification: CISA
- Certification: CRISC
- Certification: CISSP
Full description
At EX Squared LATAM, we partner with leading organizations to connect experienced professionals with high-impact career opportunities. We are currently supporting a globally recognized professional services organization in hiring a Senior IT Audit & GRC Specialist for its Mexico team.
The selected professional will be hired directly by the client under local Mexican payroll and will support internal audit engagements involving technology, information security, IT controls, risk management, and compliance.
Role Overview
The Senior IT Audit & GRC Specialist will support teams undergoing internal audits by coordinating audit requests, reviewing evidence, facilitating communication between auditors and auditees, and monitoring the remediation of identified findings.
This role will serve as a liaison between auditors, technology teams, business stakeholders, Issue Owners, and leadership. The selected professional will help translate audit requirements into clear actions, maintain accurate documentation, monitor remediation plans, and provide timely information for leadership reporting.
Success in this position requires a strong understanding of IT audit methodologies, technology controls, risk management, compliance requirements, and recognized control frameworks.
Official Title
Senior Associate – Security Governance, Risk & Compliance
Location
Mexico. Priority will be given to candidates based in Mexico City or Guadalajara who can work under a hybrid model. Candidates in other Mexican cities may be considered for remote work based on business needs.
Contract Duration
Permanent, full-time position hired directly by the client under Mexican payroll.
Working Hours
Monday through Friday, either 7:00 a.m.–4:00 p.m. or 8:00 a.m.–5:00 p.m. Eastern Time.
Language Requirement
Advanced English.
What You’ll Do
- Support teams undergoing internal technology, security, risk, and compliance audits.
- Coordinate the end-to-end audit-support process, including audit requests, evidence collection, documentation reviews, consultations, meetings, and engagement logistics.
- Translate audit requests and technical requirements into clear actions for business and technology stakeholders.
- Collect, organize, and review audit evidence to confirm that it is complete, accurate, relevant, and ready for submission.
- Coordinate artifact requests and communication between auditors, auditees, technology teams, and business stakeholders.