Associate Specialist, Governance, Risk and Compliance (TCF)

cnx; Cagayan de Oro; On-site; PHP 600,000 - 800,000; Full time

Job summary

Concentrix is seeking an Associate Specialist for Governance, Risk and Compliance (TCF) in Cagayan de Oro. You will drive global information security risk management across engagements and third parties, maintain risk frameworks, and work with business teams to conduct risk assessments.

You’ll also deliver training, interpret contractual requirements, and support audits and reviews. The role emphasizes collaboration across cross-functional teams, ensuring risk management aligns with security and

Qualifications

• Educational requirements: Bachelor's degree preferred.
• Certifications: bonus points for professional security/privacy credentials (e.g., CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT).

Responsibilities

• Drive information security risk management activities globally for all engagements and third parties.
• Maintain and improve risk management frameworks at Concentrix.
• Lead risk assessments with business and third-party teams.
• Deliver training on Risk Management to teams.
• Interpret contractual requirements to align risk management with technology and information security.
• Develop or guide documentation related to risk management.
• Support internal and external risk management processes.
• Coordinate responses to client audits, reviews, and assessments.
• Communicate risks, vulnerabilities, and findings to senior management and stakeholders.

Education

Bachelor’s Degree (preferred)

Job description

Job Title:

Associate Specialist, Governance, Risk and Compliance (TCF)

Job Description

We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.

The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.

In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.

Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.

We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.

Join us and be part of this journey towards greater opportunities and brighter futures.

Experience in actively contributing in establishment and Management of a Risk Management program for Internal Business and Third Parties to detect and mitigate risks which would include establishing capability to monitor, manage and audit risks and associated actions, establish training & awareness, driving reviews and supporting internal and external audits. Ability to think out-of-the-box and maintain balance of security risk vs solution within the best technical and cost opportunity limits, to meet the company standard, regulatory and the contractual obligations. Ability to work in a team and develop strong relationship bond with the Business and Cross-Platform teams while always wearing a “ready on the toes” attitude to support the organization at his best efforts. Ability to achieve positive & successful results for Information Security Risk Management activity, apprising the leadership about the specific risks from their vertical, through direct interaction and tactical influence over stakeholders.

Responsibilities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required.
• Complete all assigned, mandatory training within the timeframe provided
• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Accountability:

• Accountable for Location level activities:
• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Qualifications:

• Educational Requirements
• Bachelor’s Degree (preferred)

Required Certifications:

• Bonus points for Professional Security and / or Privacy credentials / certifications like CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, etc.

Location:

PHL Cagayan de Oro - Trade St

Language Requirements:

Time Type:

Full time