Associate Specialist, Governance, Risk and Compliance

CNX; Angeles; On-site; PHP 350,000 - 700,000; Full time

Job summary

Concentrix in Angeles City (Clark 2) is seeking an Associate Specialist for Governance, Risk and Compliance to lead global information security risk management for engagements and third parties. You will enhance risk frameworks, drive assessments, deliver training, and align contracts with security requirements.

The role requires collaboration with business and cross-functional teams, ensuring timely audits and risk closure while maintaining regulatory alignment and strong stakeholder

Qualifications

• Bachelor’s Degree (preferred).
• Bonus points for Professional Security and / or Privacy credentials.
• Location: Angeles City, Clark 2.

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Skills

Risk management

Information security

Audit support

Training delivery

Education

Bachelor’s Degree (preferred)

CISSP

CISA

CRISC

CISM

HCISPP

CIPP/IT

Job description

Job Title:

Associate Specialist, Governance, Risk and Compliance

Job Description

We’re Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.

The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.

In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.

Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as \"World’s Best Workplaces,\" \"Best Companies for Career Growth,\" and \"Best Company Culture,\" year after year.

We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.

Join us and be part of this journey towards greater opportunities and brighter futures.

Experience in actively contributing in establishment and Management of a Risk Management program for Internal Business and Third Parties to detect and mitigate risks which would include establishing capability to monitor, manage and audit risks and associated actions, establish training & awareness, driving reviews and supporting internal and external audits. Ability to think out-of-the-box and maintain balance of security risk vs solution within the best technical and cost opportunity limits, to meet the company standard, regulatory and the contractual obligations. Ability to work in a team and develop strong relationship bond with the Business and Cross-Platform teams while always wearing a “ready on the toes” attitude to support the organization at his best efforts. Ability to achieve positive & successful results for Information Security Risk Management activity, apprising the leadership about the specific risks from their vertical, through direct interaction and tactical influence over stakeholders.

Responsibilities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties


• Maintain and Improve the risk management frameworks at Concentrix


• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties


• Deliver training to teams on Risk Management


• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program


• Develop the documents as required or guiding the team responsible in development of the required documentation


• Support and manage Internal and External risks


• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology


• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required.


• Complete all assigned, mandatory training within the timeframe provided


• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Accountability:

Accountable for Location level activities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties


• Maintain and Improve the risk management frameworks at Concentrix


• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties


• Deliver training to teams on Risk Management


• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program


• Develop the documents as required or guiding the team responsible in development of the required documentation


• Support and manage Internal and External risks


• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology


• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Qualifications:

Educational Requirements

Bachelor’s Degree (preferred)

Required Certifications:

Bonus points for Professional Security and / or Privacy credentials / certifications like CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, etc.

Location:

PHL Angeles City - Clark 2

Time Type:

Full time