Information Technology Risk Manager

We are seeking an experienced IT Risk Manager to join our Technology organization and play a key role in strengthening technology risk governance, audit remediation, and control oversight across the bank.

The IT Risk Manager will serve as a critical first line of defense partner, driving technology risk management activities, audit issue remediation, governance reporting, and risk assessments. This individual will collaborate closely with Technology, Risk Management, Internal Audit, Compliance, and business stakeholders to ensure effective controls, regulatory compliance, and timely resolution of risk and audit findings.

This role is particularly important in supporting the closure of open audit and risk issues, enhancing the overall IT control environment, and strengthening governance practices across the organization.

Key Responsibilities

• Lead and support technology risk and control initiatives across the IT organization.
• Administer and oversee Risk and Control Self-Assessment (RCSA) activities, ensuring compliance with established risk management standards.
• Manage issues, findings, exceptions, and remediation plans throughout their lifecycle.
• Partner with Internal Audit, Risk Management (2LoD), and business stakeholders to identify, assess, and mitigate technology risks.
• Monitor key risk metrics, risk appetite indicators, and governance reporting requirements.
• Coordinate responses to audit requests and regulatory examinations.
• Drive timely remediation of audit and regulatory findings.
• Prepare governance materials and reporting for committees and senior leadership forums.
• Ensure action items and deliverables are tracked and completed according to agreed timelines.

Qualifications

Required

• 8+ years of experience in technology risk, IT controls or related functions.
• Experience implementing, enhancing, or managing risk and control frameworks.
• Experience supporting regulatory examinations and remediation activities.
• Experience with technology audits involving CNBV and/or Banxico.
• Strong understanding of issue management, audit remediation, and risk governance.
• Experience working with second and third lines of defense.
• Strong stakeholder management and cross-functional collaboration skills.
• Solid understanding of IT infrastructure and networking concepts.
• Project management experience.
• Advanced English communication skills.

Preferred

• CISA, CRISC, and/or CISSP certifications.
• Banking industry experience.
• Knowledge of SPEI, SPID, SWIFT, or MQ messaging platforms.
• Understanding of enterprise architecture frameworks such as TOGAF.
• Previous software development experience.
• Japanese language skills are a plus.

Why Join Us?

This is an opportunity to work alongside local and international stakeholders to strengthen technology risk management practices and support critical business operations. You'll play a key role in driving compliance, governance excellence, and operational resilience across the organization.

If you require additional information, please refer to our privacy notice available on our website.