GRC Specialist: Compliance & Security Audits

Concentrix; Morong; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Concentrix is seeking a dedicated professional to lead compliance audits, risk assessment, and governance across multiple locations. You will coordinate external audits, manage evidence, and ensure adherence to client requirements and regulatory standards.

The role involves collaboration with Legal and privacy teams, updating security strategies, and delivering dashboards to leadership as part of ongoing assurance and risk mitigation efforts.

Qualifications

• Strong understanding / experience of Information security / Cyber Security / Business Resilience/ Disaster Recovery/ Crisis Management space and its impact on businesses.
• Experience in managing security, risk and compliance is desired.
• Ensure compliance with internal controls and external standards (ISO 27001, ISO
• Experience in working with External Auditing firms on the industry certifications (ISO 27001, ISO 22301, PCI DSS, TISAX)
• Coordinate External audits, manage evidence collection, and track remediation of findings.
• Prepare dashboards and compliance reports for leadership.
• Support governance structures and ensure alignment with business and regulatory requirements.
• Assist in updating the cyber security strategy to leverage new technology and threat information.
• Experience in working with Legal and data privacy teams on the regulatory requirements and translating them into security controls.

Responsibilities

• Conduct regular compliance audits across locations.
• Monitor risk factors and implement mitigation measures.
• Manage governance on contractual compliance controls and external audits.
• Execute extensive audits per locations as required by client.
• Provide investigation management support and remediation tracking.
• Ensure compliance with client requirements and regulatory frameworks.
• Develop dashboards and compliance reports for leadership.
• Collaborate with Legal and privacy teams on regulatory requirements.
• Update cyber security strategy with new tech and threat intel.
• Participate in regular 1:1 meetings with direct manager.

Skills

Information security

Cyber security

Disaster recovery

Crisis management

Regulatory compliance

Tools

ISO 27001

ISO 22301

PCI DSS

TISAX

Job description

Concentrix is seeking a dedicated professional to lead compliance audits, risk assessment, and governance across multiple locations. You will coordinate external audits, manage evidence, and ensure adherence to client requirements and regulatory standards.

The role involves collaboration with Legal and privacy teams, updating security strategies, and delivering dashboards to leadership as part of ongoing assurance and risk mitigation efforts.