Associate Specialist, GRC

Concentrix; Morong; On-site; PHP 500,000 - 1,200,000; Full time

Job summary

Concentrix is seeking a skilled Information Security Risk Manager to lead the global risk program for internal business units and third parties. You will monitor, manage and audit risks, drive capabilities, and collaborate with cross-functional teams to balance security with cost-effective solutions.

Ideal candidates will hold a Bachelor's degree (preferred) and have certifications like CISSP, CISA, CRISC, CISM, HCISPP, or CIPP/IT.

Qualifications

• Experience in establishing and managing an information security risk program.
• Ability to assess risks and drive risk mitigation activities across internal and third-party engagements.
• Strong communication to leadership and cross-functional teams to ensure risk-based decisions.

Responsibilities

• Drive Information Security Risk Management activity globally for all business engagements and third parties.
• Maintain and improve risk management frameworks at Concentrix.
• Work with business and support teams to drive risk assessments, including third parties.
• Deliver training to teams on Risk Management.
• Interpret contractual requirements to align risk management programs.
• Develop required documentation with the responsible team.
• Support internal and external risks and client audits.

Skills

Risk Management

Information Security

Stakeholder Engagement

Training Delivery

Education

Bachelor's Degree (preferred)

Job description

We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.

The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.

In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.

Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.

We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.

Join us and be part of this journey towards greater opportunities and brighter futures.

Job Description

Experience in actively contributing in establishment and Management of a Risk Management program for Internal Business and Third Parties to detect and mitigate risks which would include establishing capability to monitor, manage and audit risks and associated actions, establish training & awareness, driving reviews and supporting internal and external audits. Ability to think out-of-the-box and maintain balance of security risk vs solution within the best technical and cost opportunity limits, to meet the company standard, regulatory and the contractual obligations. Ability to work in a team and develop strong relationship bond with the Business and Cross-Platform teams while always wearing a “ready on the toes” attitude to support the organization at his best efforts. Ability to achieve positive & successful results for Information Security Risk Management activity, apprising the leadership about the specific risks from their vertical, through direct interaction and tactical influence over stakeholders.

Responsibilities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required.
• Complete all assigned, mandatory training within the timeframe provided
• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Accountability:

Drive Information Security Risk Management activity globally for all the business engagements and third parties

Maintain and Improve the risk management frameworks at Concentrix

Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties

Deliver training to teams on Risk Management

Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program

Develop the documents as required or guiding the team responsible in development of the required documentation

Support and manage Internal and External risks

Handle and respond to client audits, reviews and assessments through time-bound and committed methodology

Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Complete all assigned, mandatory training within the timeframe provided

Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Qualifications:

Educational Requirements

Bachelor’s Degree (preferred)

Required Certifications:

Bonus points for Professional Security and / or Privacy credentials / certifications like CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, etc.