Associate Specialist, Governance, Risk and Compliance

Concentrix; Angeles; On-site; PHP 600,000 - 900,000; Full time

Job summary

Concentrix is seeking an Associate Specialist in Governance, Risk and Compliance to drive global information security risk management for all engagements and third parties. The role focuses on maintaining risk frameworks, guiding risk assessments across business units, and delivering targeted training on risk management.

The candidate will interpret contractual security requirements, develop essential documentation, and coordinate responses to client audits, ensuring timely mitigation of

Qualifications

• Experience establishing and managing a risk management program for internal business and third parties.
• Ability to drive risk assessments, training and awareness, and support audits.
• Strong collaboration with business and cross-platform teams to mitigate risks.

Responsibilities

• Drive Information Security Risk Management activity globally for all business engagements and third parties.
• Maintain and improve risk management frameworks at Concentrix.
• Work with business and support teams to drive risk assessments including third parties.
• Deliver training to teams on Risk Management.
• Interpret contractual requirements to align risk management programs.
• Develop required documentation and support internal/external risk management.
• Handle and respond to client audits, reviews, and assessments with timely, methodical approaches.
• Communicate risks, vulnerabilities, threats and findings to senior management and stakeholders; coordinate closure.

Skills

Information security risk management

Risk assessments

Training delivery

Audits coordination

Stakeholder engagement

Education

Bachelor's degree

Professional security certifications (CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT)

Job description

Job Title Associate Specialist, Governance, Risk and Compliance

Job Description

We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled. The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent. In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services. Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year. We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are. Join us and be part of this journey towards greater opportunities and brighter futures. Experience in actively contributing in establishment and Management of a Risk Management program for Internal Business and Third Parties to detect and mitigate risks which would include establishing capability to monitor, manage and audit risks and associated actions, establish training & awareness, driving reviews and supporting internal and external audits. Ability to think out-of-the-box and maintain balance of security risk vs solution within the best technical and cost opportunity limits, to meet the company standard, regulatory and the contractual obligations. Ability to work in a team and develop strong relationship bond with the Business and Cross-Platform teams while always wearing a “ready on the toes” attitude to support the organization at his best efforts. Ability to achieve positive & successful results for Information Security Risk Management activity, apprising the leadership about the specific risks from their vertical, through direct interaction and tactical influence over stakeholders.

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required.
• Complete all assigned, mandatory training within the timeframe provided
• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Accountability

Accountable for Location level activities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Educational Requirements

Bachelor’s Degree (preferred)

Required Certifications

Bonus points for Professional Security and / or Privacy credentials / certifications like CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, etc.