InfoSec Risk & Compliance Specialist

Concentrix; Quezon City; On-site; PHP 800,000 - 1,000,000; Full time

Job summary

Concentrix in Quezon City is seeking an experienced Information Security Risk Manager to drive global risk management activities for all business engagements and third parties. You will maintain and improve risk frameworks, conduct risk assessments with business and support teams, and deliver training on risk management.

Responsibilities include interpreting contractual requirements for technology and information security, developing required documentation, handling client audits, and

Qualifications

• Bachelor's Degree (preferred)
• At least 3 to 4 years of experience
• BPO experience is preferred

Responsibilities

• Drive Information Security Risk Management activity globally for all the business engagements and third parties
• Maintain and Improve the risk management frameworks at Concentrix
• Work with business teams and support teams to drive Risk Assessments for their respective spans including third parties
• Deliver training to teams on Risk Management
• Interpret the business contractual requirements (Technology & Information Security) to align Risk Management program
• Develop the documents as required or guiding the team responsible in development of the required documentation
• Support and manage Internal and External risks
• Handle and respond to client audits, reviews and assessments through time-bound and committed methodology
• Communicate effectively the risks, vulnerabilities, threats and findings of the assessments and reviews to senior management and relevant stakeholders and co-ordinate and govern the closure, as required

Skills

Information Security Risk Management

Risk Assessments

Audits

Training

Stakeholder communication

Education

Bachelor's Degree (preferred)

Tools

CISSP

CISA

CRISC

CISM

HCISPP

CIPP/IT

Job description

Concentrix in Quezon City is seeking an experienced Information Security Risk Manager to drive global risk management activities for all business engagements and third parties. You will maintain and improve risk frameworks, conduct risk assessments with business and support teams, and deliver training on risk management.

Responsibilities include interpreting contractual requirements for technology and information security, developing required documentation, handling client audits, and