Global InfoSec Risk & Compliance Lead

Concentrix; Mandaluyong; On-site; PHP 600,000 - 900,000; Full time

Job summary

Concentrix is seeking a Risk Management professional to lead Information Security risk activities across business engagements and third parties. You will implement and refine risk frameworks, drive assessments, and deliver training to teams.

The role requires 3+ years in risk management, BPO exposure preferred, and certifications in security/privacy are a plus. You will work with cross-functional teams to meet contractual and regulatory obligations.

Qualifications

• Bachelor's Degree preferred; 3 years of experience (Junior level).
• BPO experience is preferred.
• Certifications in security/privacy are advantageous (CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT).

Responsibilities

• Drive Information Security Risk Management activity globally for all business engagements and third parties.
• Maintain and Improve the risk management frameworks at Concentrix.
• Work with business and support teams to drive risk assessments for respective spans including third parties.
• Deliver training to teams on Risk Management.
• Interpret business contractual requirements (Technology & Information Security) to align Risk Management program.
• Develop documents as required or guide the team in documentation.
• Support and manage internal and external risks.
• Handle and respond to client audits, reviews and assessments timely.
• Communicate risks, vulnerabilities, threats and findings to senior management and stakeholders and coordinate closure.
• Complete all mandatory training within the timeframe.
• Conduct and/or participate in regular 1:1 meetings with manager/direct reports.

Skills

Information Security

Risk Management

Education

Bachelor's Degree

Tools

CISSP

CISA

CRISC

Job description

Concentrix is seeking a Risk Management professional to lead Information Security risk activities across business engagements and third parties. You will implement and refine risk frameworks, drive assessments, and deliver training to teams.

The role requires 3+ years in risk management, BPO exposure preferred, and certifications in security/privacy are a plus. You will work with cross-functional teams to meet contractual and regulatory obligations.