Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
EY

Policy, Risk, and Control Methodology Analyst

EY

. Coordinate, maintain and update the IT PRC Framework .

Posted 11/4/2026full-timeMiguel Hidalgo • MexicoJuniorMid-LevelWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management and Compliance, with a strong foundation in Governance, Risk, and Compliance models and frameworks. Proficient in assessing regulations and aligning IT PRC Frameworks with organizational initiatives and industry standards.

Highest-signal resume keywords
IT Risk ManagementGovernance, Risk, And ComplianceISO, NIST, COBIT, PCI DSSUnified Compliance FrameworkAdvanced Degree In Computer Science

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Information SecuritySecurity ComplianceIT AuditRisk AssessmentControl MappingPolicy GovernanceRisk And Control KnowledgeAnalytical SkillsAttention To DetailAutomation
Soft Skills
Excellent Writing SkillsInterpersonal SkillsCommunication SkillsPresentation SkillsAbility To Collaborate
Tools & Technologies
Microsoft OfficeM365 ProductsPower BIPowerAppsGenerative AIUnified Compliance Tool
Certifications & Qualifications
CRISCCISSPCISMCISACGRCGIACSecurity+
Industry Keywords
IT PRC FrameworkRisk DomainsControl ObjectivesEmerging RegulationsInformation Security PoliciesCompliance MethodologiesGlobal TeamsVirtual TeamsPolicy Lifecycle ManagementRisk-Aware Culture

About the role

Key responsibilities & impact
  • Coordinate, maintain and update the IT PRC Framework
  • Integrate IT risk domains, risk categories, processes, control objectives, common controls, Information Security documents and authoritative sources
  • Execute the Methodology Program’s service offerings, strategy, goals and objectives
  • Implement the PRC Framework operating model and integrate it with organizational projects, programs and emerging initiatives
  • Provide subject-matter expertise in IT risk management and compliance methodologies
  • Apply Governance, Risk and Compliance models, industry standards and control frameworks
  • Mature the IT PRC Framework operating model and align it with GRC tooling
  • Assess emerging regulations, industry practices and control frameworks to identify gaps and required updates
  • Cross-map PRC common controls with Information Security policies and standards
  • Support gap assessments and control mapping to policies, standards and frameworks
  • Advise stakeholders on interpretation and application of the IT PRC Framework
  • Collaborate with Policy, Risk, Control and Compliance teams and cross-functional stakeholders
  • Create processes and procedures supporting Methodology Program initiatives
  • Assist with risk management documentation and lifecycle management
  • Support implementation and ongoing use of the Unified Compliance tool
  • Evangelize a risk-aware culture and execute IT Risk Management education and awareness plans

Requirements

What you’ll need
  • 2+ years of experience in Information Technology, Information Security, Security Compliance, IT Audit, and/or IT Risk Management
  • An advanced degree in Computer Science, Information Security or a related field, or equivalent work experience
  • Solid knowledge and working experience in governance, risk and compliance as applied to technology
  • Working knowledge and practical experience with ISO, NIST, COBIT, PCI DSS, Unified Compliance Framework, GDPR, DORA, CRA and SOX
  • Ability to apply risk and control knowledge in an advisory capacity
  • Experience working on global and virtual teams
  • Strong English language skills
  • Excellent writing, presentation, interpersonal and communication skills
  • Understanding of Information Security concepts and security principles
  • Strong analytical and research skills with attention to detail
  • Ability to leverage automation to improve efficiency
  • Ability to learn new technologies
  • Ideally, experience in IT Risk Management and/or Information Security disciplines
  • Ideally, experience communicating with management, clients and vendors
  • Skilled in executive-level presentations and briefings
  • Working understanding of policy governance activities and policy lifecycle management
  • Skilled in Microsoft Office and M365 products, including Word, Excel, PowerPoint, SharePoint, PowerApps, Power BI and Generative AI
  • Interest and ability to obtain relevant certifications such as CRISC, CISSP, CISM, CISA, CGRC, GIAC or Security+

Benefits

Comp & perks
  • Continuous learning and career development opportunities
  • Tools and flexibility to make a significant impact
  • Coaching and leadership development
  • Diverse and inclusive culture
  • Flexible working arrangements
  • Reasonable accommodations for individuals with disabilities
  • Physical, emotional, financial and social well-being benefits
  • Country-specific benefits package
  • Global team collaboration opportunities