Internal Control Global Corporate Controls Analyst

The Internal Control Global Corporate Controls Analyst supports the execution of Internal Control initiatives, with a primary focus on Information Technology controls. The role maintains IT General Controls (ITGC), IT Application Controls (ITAC), process narratives, flowcharts, and related Corporate Controls Matrices, ensuring documentation remains accurate and aligned with actual processes, systems, risks, and SOX/ICOFR requirements.

The position works closely with Internal Control Managers, P&IT, GES/EISM, process and control owners, Internal Audit, and external auditors. The role supports IT control initiatives including Example of One, gaps and enhancements, remediation activities, ServiceNow IRM, and selected corporate control initiatives related to emerging regulatory and technology requirements.

Main Responsibilities

• Document, maintain, and enhance ITGC and ITAC documentation, including process narratives, flowcharts, control descriptions, risks, procedures, and supporting guidance in the applicable Internal Control repositories and platforms.
• Support Corporate Controls Matrices updates, validation, and periodic maintenance, incorporating changes in systems, processes, risks, ownership, control design, and regulatory requirements.
• Support the execution of IT control initiatives, including Example of One for ITGC and ITAC, by coordinating inputs, documenting agreed control designs, tracking deliverables, and maintaining project documentation.
• Monitor IT control gaps, enhancements, and remediation plans, ensuring that actions, evidence, owners, dependencies, and target dates are appropriately documented and followed through to closure.
• Support SOX/ICOFR compliance and audit activities, including walkthroughs, information requests, evidence readiness, testing coordination, and follow-up with control owners, Internal Audit, and external auditors.
• Support the implementation, testing, administration, and continuous improvement of ServiceNow IRM and other Internal Control platforms related to IT controls and compliance activities.
• Support corporate control initiatives related to emerging regulatory and governance requirements, including ESG-related internal control considerations.
• Use Artificial Intelligence and other emerging technologies to improve efficiency, automate routine activities, enhance documentation, and strengthen Internal Control processes, while following applicable governance and information security requirements.
• Identify opportunities to standardize, simplify, and automate Internal Control activities, including documentation, monitoring, evidence collection, and remediation follow-up.

Position Challenges

• Understanding IT processes, applications, infrastructure, and their relationship with business processes and financial reporting risks.
• Maintaining ITGC and ITAC documentation and related Corporate Controls Matrices aligned with system implementations, process changes, and evolving control requirements.
• Coordinating stakeholders across Internal Control, P&IT, GES/EISM, business functions, Internal Audit, and external auditors.
• Managing competing priorities across SOX activities, audit requests, remediation plans, ServiceNow enhancements, ESG-related requirements, and control transformation initiatives.
• Translating technical changes, identified gaps, audit observations, and emerging regulatory requirements into clear and sustainable control documentation.
• Evaluating and applying Artificial Intelligence tools to improve efficiency while maintaining appropriate governance, information security, and control standards.
• Driving timely follow-up and accountability for gaps, enhancements, and remediation activities without direct authority over control owners.

Qualifications

Languages & proficiency:

Spanish – fluent, English – advanced (professional reading, writing, and conversation)

Academic background:

Bachelor's degree in Accounting, Finance, Industrial Engineering, Information Systems, Business Administration.

Postgraduate studies or specialization in Internal Control, IT Audit, Risk Management, Information Systems, or Information Technology are a plus.

Areas of expertise:

Internal Control, SOX/ICOFR, and COSO framework

IT General Controls (ITGC), IT Application Controls (ITAC), or IT Audit

Process and control documentation, walkthroughs, and Corporate Controls Matrices maintenance

Control deficiency, gap, enhancement, and remediation follow-up, familiarity with emerging regulatory and governance requirements, including ESG-related internal control considerations – desirable.

Technical skills:

Strong Microsoft Office skills

Knowledge of ERP and enterprise application environments; SAP exposure is desirable.

Experience with Governance, Risk & Compliance platforms; ServiceNow IRM is desirable.

Understanding of access management, change management, IT operations, automated controls, interfaces, and reports is desirable.

Familiarity with the practical use of Artificial Intelligence tools to improve efficiency, automate routine activities, enhance documentation, and strengthen Internal Control processes is desirable.

Certifications such as CISA, COBIT, COSO, SOX, or CIA are a plus, but not mandatory.

Soft skills:

Strong written and verbal communication, analytical thinking and attention to detail and stakeholder management and cross-functional collaboration.

Internal/External Relations

INTERNAL

• Corporate and Central Internal Control teams.
• P&IT, GES/EISM, Finance, Procurement, Human Resources, Legal & Compliance, Internal Audit, Sustainability, and Corporate process and control owners.

EXTERNAL

• CEMEX's appointed external auditor.
• IT outsourcing and managed-service partners.
• Technology vendors and implementation partners, including ServiceNow-related service providers.

CEMEX Diversity and Inclusion Statement

At Cemex, we recognize the diversity of the world in which we live and in which we do business. We respect diversity, we address the inclusion and non-discrimination of any talented person, regardless of gender, physical ability, age, sexual orientation, culture, ethnicity, religion, political affiliation, marital status, pregnancy / maternity / paternity and nationality. We promote a culture of equity for the construction of a sustainable business and the well-being and development of Cemex employees.