Information Security & Privacy Risk Lead

WNS Global Services, Inc.; Quezon City; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

WNS Global Services, Inc. in the Philippines seeks a knowledgeable information security professional to perform operational risk and privacy assessments across client operations and tech infrastructure.

The role requires coordinating with risk and business leaders to ensure regulatory compliance, reviewing contracts and privacy exhibits, and guiding incident investigations and remediation efforts to protect sensitive data.

Qualifications

• Bachelor's degree preferred.
• Focused on infosec risk assessment and privacy assessment.
• Security exception handling.
• Experience handling information security incidents and data breaches investigations.
• Working on application security reviews.
• Well-versed in using infosec tools and technologies.
• Experience with Data Privacy Agreements, contracts, SLAs.
• Experience in infosec audits (ISO 27001, NIST).
• ISO 27001 certification; CISA/CISM/CISSP a plus.

Responsibilities

• Carry out all operational information security risk assessment.
• Carry out Privacy risk and impact assessment for client operations and technology infrastructure.
• Conducting operations audit based on Information security and privacy principles.
• Conducting review of contractual contracts, privacy contracts / exhibits / privacy agreements
• Ensure various information security, privacy regulatory requirements /client’s data privacy requirements are effectively addressed.
• Advise business unit leaders and risk management leaders in issues related to information security.
• Handling information security incidents, data breaches investigations
• Handling security exceptions and signoffs
• Assist Risk management functional leaders in overseeing compliance activities relating to information security.
• Creation and maintenance of risk assessment trackers and keeping them current.
• Creation and maintenance of up-to-date inventory of sensitive information profiling for client operations
• Ensure that contract arrangements are in place and being complied with. Obtain necessary evidence for the same. Conducting necessary due diligence on subcontractors / third party.
• Driving information security training and awareness to ensure employees are aware of their responsibilities.
• Experience on privacy regulations (HIPAA/ HITECH, GDPR, POPIA, PIPEDA)

Skills

InfoSec risk

Privacy assessment

Incident handling

App security review

InfoSec tools

Data privacy contracts

ISO27001 audit

CISA/CISM/CISSP

Education

Bachelor's degree

Tools

Infosec tools

Job description

WNS Global Services, Inc. in the Philippines seeks a knowledgeable information security professional to perform operational risk and privacy assessments across client operations and tech infrastructure.

The role requires coordinating with risk and business leaders to ensure regulatory compliance, reviewing contracts and privacy exhibits, and guiding incident investigations and remediation efforts to protect sensitive data.