InfoSec Risk & Compliance Associate

CNX; Angeles; On-site; PHP 350,000 - 700,000; Full time

Job summary

Concentrix in Angeles City (Clark 2) is seeking an Associate Specialist for Governance, Risk and Compliance to lead global information security risk management for engagements and third parties. You will enhance risk frameworks, drive assessments, deliver training, and align contracts with security requirements.

The role requires collaboration with business and cross-functional teams, ensuring timely audits and risk closure while maintaining regulatory alignment and strong stakeholder

Qualifications

• Bachelor’s Degree (preferred).
• Bonus points for Professional Security and / or Privacy credentials.
• Location: Angeles City, Clark 2.

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Skills

Risk management

Information security

Audit support

Training delivery

Education

Bachelor’s Degree (preferred)

CISSP

CISA

CRISC

CISM

HCISPP

CIPP/IT

Job description

Concentrix in Angeles City (Clark 2) is seeking an Associate Specialist for Governance, Risk and Compliance to lead global information security risk management for engagements and third parties. You will enhance risk frameworks, drive assessments, deliver training, and align contracts with security requirements.

The role requires collaboration with business and cross-functional teams, ensuring timely audits and risk closure while maintaining regulatory alignment and strong stakeholder