Specialist - Governance Risk and Compliance

Concentrix; Morong; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Concentrix is seeking a dedicated professional to lead compliance audits, risk assessment, and governance across multiple locations. You will coordinate external audits, manage evidence, and ensure adherence to client requirements and regulatory standards.

The role involves collaboration with Legal and privacy teams, updating security strategies, and delivering dashboards to leadership as part of ongoing assurance and risk mitigation efforts.

Qualifications

• Strong understanding / experience of Information security / Cyber Security / Business Resilience/ Disaster Recovery/ Crisis Management space and its impact on businesses.
• Experience in managing security, risk and compliance is desired.
• Ensure compliance with internal controls and external standards (ISO 27001, ISO
• Experience in working with External Auditing firms on the industry certifications (ISO 27001, ISO 22301, PCI DSS, TISAX)
• Coordinate External audits, manage evidence collection, and track remediation of findings.
• Prepare dashboards and compliance reports for leadership.
• Support governance structures and ensure alignment with business and regulatory requirements.
• Assist in updating the cyber security strategy to leverage new technology and threat information.
• Experience in working with Legal and data privacy teams on the regulatory requirements and translating them into security controls.

Responsibilities

• Conduct regular compliance audits across locations.
• Monitor risk factors and implement mitigation measures.
• Manage governance on contractual compliance controls and external audits.
• Execute extensive audits per locations as required by client.
• Provide investigation management support and remediation tracking.
• Ensure compliance with client requirements and regulatory frameworks.
• Develop dashboards and compliance reports for leadership.
• Collaborate with Legal and privacy teams on regulatory requirements.
• Update cyber security strategy with new tech and threat intel.
• Participate in regular 1:1 meetings with direct manager.

Skills

Information security

Cyber security

Disaster recovery

Crisis management

Regulatory compliance

Tools

ISO 27001

ISO 22301

PCI DSS

TISAX

Job description

We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.

The global technology and services leader that powers the world’s best brands, today and into the future. We’re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we’re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.

In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today’s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.

Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.

We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.

Join us and be part of this journey towards greater opportunities and brighter futures.

The role is accountable for conducting regular compliance audits, monitoring

risk factors, and implementing mitigation measures across the program at multiple

locations. It includes managing governance on contractual compliance controls, executing

extensive audits per respective locations (as contractually required by client), provides

investigation management support and ensures compliance with client requirements,

drives prevention activities, and conducts ongoing vulnerability assessments. They host

and manage Client external audits and post audit remediation being the respective region

Risk and Compliance, and SR (Supplier Responsibility) client liaison.

• Strong understanding / experience of Information security / Cyber Security / Business Resilience/ Disaster Recovery/ Crisis Management space and its impact on businesses.
• Experience in managing security, risk and compliance is desired
• Ensure compliance with internal controls and external standards (ISO 27001, ISO
• Experience in working with External Auditing firms on the industry certifications (ISO 27001, ISO 22301, PCI DSS, TISAX)
• Coordinate External audits, manage evidence collection, and track remediation of findings.
• Prepare dashboards and compliance reports for leadership.
• Support governance structures and ensure alignment with business and regulatory requirements.
• Assist in updating the cyber security strategy to leverage new technology and threat information.
• Experience in working with Legal and data privacy teams on the regulatory requirements and translating them into security controls.
• Reviewing & aligning data governance, compliance and risk policies and procedures with relevant regulatory and operational frameworks.
• Complete all assigned, mandatory training within the timeframe provided
• Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager