Global GRC & Information Security Risk Specialist

Concentrix; Angeles; On-site; PHP 600,000 - 900,000; Full time

Job summary

Concentrix is seeking an Associate Specialist in Governance, Risk and Compliance to drive global information security risk management for all engagements and third parties. The role focuses on maintaining risk frameworks, guiding risk assessments across business units, and delivering targeted training on risk management.

The candidate will interpret contractual security requirements, develop essential documentation, and coordinate responses to client audits, ensuring timely mitigation of

Qualifications

• Experience establishing and managing a risk management program for internal business and third parties.
• Ability to drive risk assessments, training and awareness, and support audits.
• Strong collaboration with business and cross-platform teams to mitigate risks.

Responsibilities

• Drive Information Security Risk Management activity globally for all business engagements and third parties.
• Maintain and improve risk management frameworks at Concentrix.
• Work with business and support teams to drive risk assessments including third parties.
• Deliver training to teams on Risk Management.
• Interpret contractual requirements to align risk management programs.
• Develop required documentation and support internal/external risk management.
• Handle and respond to client audits, reviews, and assessments with timely, methodical approaches.
• Communicate risks, vulnerabilities, threats and findings to senior management and stakeholders; coordinate closure.

Skills

Information security risk management

Risk assessments

Training delivery

Audits coordination

Stakeholder engagement

Education

Bachelor's degree

Professional security certifications (CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT)

Job description

Concentrix is seeking an Associate Specialist in Governance, Risk and Compliance to drive global information security risk management for all engagements and third parties. The role focuses on maintaining risk frameworks, guiding risk assessments across business units, and delivering targeted training on risk management.

The candidate will interpret contractual security requirements, develop essential documentation, and coordinate responses to client audits, ensuring timely mitigation of