Governance, Risk and Compliance Specialist (Mandaluyong)

Concentrix Philippines; Mandaluyong; On-site; PHP 670,000 - 1,339,000; Full time

Job summary

Concentrix Philippines is seeking an Information Security Risk Management professional to lead risk activities for internal business, third parties, and audits, ensuring regulatory and contractual compliance.

The role focuses on building robust risk frameworks, delivering trainings, and coordinating with business and cross-platform teams to address findings and drive timely remediation. This onsite position at Megamall requires shifting/night schedules and a proactive, collaborative mindset.

Qualifications

• Bachelor’s Degree (preferred)
• At least 3 years of experience required
• Experience in a BPO setting is a plus/preferred

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Education

Bachelor’s Degree (preferred)

Job description

Experience in actively contributing in establishment and Management of a Risk Management program for Internal Business and Third Parties to detect and mitigate risks which would include establishing capability to monitor, manage and audit risks and associated actions, establish training & awareness, driving reviews and supporting internal and external audits. Ability to think out-of-the-box and maintain balance of security risk vs solution within the best technical and cost opportunity limits, to meet the company standard, regulatory and the contractual obligations. Ability to work in a team and develop strong relationship bond with the Business and Cross-Platform teams while always wearing a “ready on the toes” attitude to support the organization at his best efforts. Ability to achieve positive & successful results for Information Security Risk Management activity, apprising the leadership about the specific risks from their vertical, through direct interaction and tactical influence over stakeholders.

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties

• Maintain and Improve the risk management frameworks at Concentrix

• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties

• Deliver training to teams on Risk Management

• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program

• Develop the documents as required or guiding the team responsible in development of the required documentation

• Support and manage Internal and External risks

• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology

• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required.

• Complete all assigned, mandatory training within the timeframe provided

• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports

Accountability

• Accountable for Location level activities:

• Drive Information Security Risk Management activity globally for all the business engagements and third parties

• Maintain and Improve the risk management frameworks at Concentrix

• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties

• Deliver training to teams on Risk Management

• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program

• Develop the documents as required or guiding the team responsible in development of the required documentation

• Support and manage Internal and External risks

• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology

• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Qualifications

• Educational Requirements

• Bachelor’s Degree (preferred)

• At least 3 years of experience required

• Experience in a BPO Setting is a plus/preferred

Required Certifications

• Bonus points for Professional Security and / or Privacy credentials / certifications like CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, etc.

• Fulltime onsite

• Shifting schedule/night shift

• Location: Concentrix Megamall

• Start Asap (October)