Senior Information Security Engineer

TeleTech Holdings, Inc.; Bogotá; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Performance bonus opportunities

Tuition reimbursement

Descripción de la vacante

TTEC is a global provider of customer experience and growth solutions. The Senior Information Security Engineer will support security, privacy and supplier risk across RFIs/RFPs, audits, and risk reviews, working with internal and external stakeholders.

Strong knowledge of PCI, SOC, ISO, HIPAA and GDPR is essential, with excellent English communication. The role requires self-motivation, organizational skills and the ability to operate in a fast-paced environment supporting sales opportunities

Formación

• Minimum 7+ years of experience in Information Security.
• Minimum 5+ years of experience in Supplier Risk and Compliance Management.
• Familiarity with government laws and highly regulated industries.
• Understanding of security frameworks, such as PCI, HIPAA, SOC, and ISO.
• Excellent communication skills in the English language.

Responsabilidades

• Lead security and compliance support for Sales Solution and Proposal Management’s RFI/RFP for new client opportunities.
• Provide information security and privacy guidance to Sales Solution, Global Sourcing and other technical teams.
• Perform third-party supplier due diligence as part of the company’s vendor onboarding process.
• Review supplier questionnaires and assess compliance with company requirements.
• Identify security risks and coordinate remediation with internal teams.

Conocimientos

Information security

Supplier risk

Compliance management

Communication skills

English proficiency

Educación

CISSP, CISM, CISA certifications

Herramientas

Security frameworks knowledge

Descripción del empleo

Job Description - Senior Information Security Engineer (04D7G)

Senior Information Security Engineer

Senior Information Security Engineer

TTEC is a pioneer in customer experience, engagement and growth solutions. Our 60,000+ employees serve customers in more than 80 countries and 50 languages across social, mobile, and digital channels. We utilize a holistic approach, applying solutions to help companies provide an amazing experience to their customers, inspire customer loyalty, and grow their business. Our employees live by a set of customer-focused values that guide relationships with clients, their customers and each other.

The CSA Team handles key functional and compliance processes at the intersection of information security, supplier/vendor security and risk management. This includes supporting new sale/client opportunities including Requests for Information (RFIs) and Requests for Production (RFPs), client/supplier assurance audits and assessments, and related information security and risk management functions.

The Sr. Information Security Engineer will perform a variety of support functions involving information security, compliance and supplier management. The Sr. Information Security Engineer will need to be a self-motivated individual, comfortable working independently and as part of a larger group, and possess strong oral and written communication skills in the English language. The role necessitates a high level of organizational and time management ability. Operating cooperatively and professionally with internal/external stakeholders is essential.

What You’ll Do
The Information Security Engineer will be responsible for the following duties:

Strong knowledge base and comprehension in current information security controls/safeguards and industry compliance framework regulations and standards (e.g. PCI DSS, SOC 1 and SOC 2 Type II, ISO 27001/2, HIPPA, HITRUST, GDPR). Applying this knowledge with the Company’s security policies and best practices when performing new sale opportunity security and compliance assessments and supplier security and risk assessment reviews.

Ability to prioritize projects and be a multi-tasker.

Comprehension and affective communicator on Company’s Global Information Security, Privacy and Compliance policies and Company processes.

Knowledge of networks and operating systems while adjusting them according to our business environment.

Interact frequently with Information Security, and other members of the IT technology teams, IT and Client Operations, quick learner and comprehension.

Company systems, networks, Information Security requirements and communicating how they need to be applied and how they work.

Lead security and compliance support for Sales Solution and Proposal Management’s Request For Information (RFI) and Request For Proposal (RFP) for new client opportunities. Able to market and leverage the Company’s Global Information Security, Compliance and Risk model to assist in winning bids.

Ability to provide information security, technical and industry compliance advice, guidance, and recommendations, to Sales Solution and Proposal management, Global Sourcing and other technical specialists on critical information security and industry compliance risks and threats.

Able to immediately identify current and potential Company security and compliance risks and threats, engage appropriate internal departments and collaborate with teams on remediation efforts.

Perform third-party supplier due diligence as part of company's process for using new suppliers to perform services or shares data with a supplier.

Consult with internal team to understand the risks of supplier and how these risk could impact the Company’s risk level.

Review supplier submitted security questionnaires and assess compliance with company's requirements.

Provide solutions and alternate solutions the correlate to Company security and privacy policies and processes.

What You Bring to the Role

Minimum 7+ years of experience in Information Security.

Minimum 5+ years of experience in Supplier Risk and Compliance Management.

Familiarity with government laws and highly regulated industries.

Understanding of security frameworks, such as PCI, HIPAA, SOC, and ISO.

Excellent communication skills in the English language and problem-solving abilities.

Highly self-motivated and directed professional with keen attention to detail.

Working knowledge of Data Privacy laws, especially the GDPR.

Strong Business and Technical Skills.

Ability to prioritize and meet deadlines is essential.

Attention to detail, ability to organize work, and follow-up skills are critical to the successful performance of position responsibilities.

Preferred Skills

Strong interpersonal and collaboration skills to effectively work with all stakeholders and customers to improve data and business processes and to negotiate priorities.

Experience and familiarity with contracts, Statements of Work (SOWs) and Master Servicing Agreements (MSAs) from an information security and data privacy standpoint.

CISSP, CISM, CISA, or any accredited security certification.

What You Can Expect

• Supportive of your career and professional development
• An inclusive culture and community minded organization where giving back is encouraged
• A global team of curious lifelong learners guided by our company values
• Ask us about our paid time off (PTO) and wellness and healthcare benefit.
• And yes... a great compensation package and performance bonus opportunities, benefits you'd expect and maybe a few that would pleasantly surprise you (like tuition reimbursement). Visit https://mybenefits.ttec.com/ for more information.

About TTEC TTEC is a global consulting, technology, and managed services company that helps brands deliver smarter, more human customer experiences through data, AI, and technology. Our work connects people and brands every day—and it starts with the talent behind the experience.

TTEC is proud to be an equal opportunity employer where all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. TTEC embraces and is committed to building a diverse and inclusive workforce that respects and empowers the cultures and perspectives within our global teams. We aim to reflect the communities we serve, by not only delivering amazing service and technology, but also humanity. We make it a point to make sure all our employees feel valued, belonging, and comfortable being their authentic selves at work. As a global company, we know diversity is our strength because it enables us to view things from different perspective points and for you to bring value to the table in your own unique way.

#LI- Remote

Primary Location

TTEC is proud to be an equal opportunity employer. TTEC embraces and is committed to building a diverse and inclusive workforce that respects and empowers the cultures and perspectives within our global teams. We strive to reflect the communities we serve by not only delivering amazing service and technology, but also humanity. We make it a point to make sure all our employees feel valued and comfortable being their authentic selves at work. As a global company, we know diversity is our strength. It enables us to view projects and ideas from different perspectives and allows every individual to bring value to the table in their own unique way.