Operational Risk & Compliance Manager (Cebu)

Gratitude Inc

270 Views

19 hours ago

3-5 Year(s)

₱ 30 - ₱ 50K p.a

Job Description

Key Skills

Analytical Communication Numerical Analysis Strategies

1 candidate(s) have already applied for this Job. Apply now

Designation: Manager

Department: Operational Risk & Compliance (Cebu)

Set-up: Work from Office

Start Date: URGENT/ASAP

Interview Rounds: 3 Personal Interviews + 1 Online Assessment

Salary Budget: Open for Discussion

Education Level: College Graduate of 4-5 year Course (Bachelor’s Degree)

Experience Level: At least 3 years in the RnC field (under BPO set-up)

JOB DESCRIPTION:

· Creating, updating, and disseminating data protection policies;

· Resolving ad hoc queries and issues relating to data protection;

· Identifying data protection and information security issues that need addressing;

· Managing a data protection and information security training program;

· Managing data protection subject access requests;

· Implementing controls for adherence with data protection legislation and relevant codes of practice; Ensuring the company follows all codes of practice in the relevant sector;

· Developing audit standards for personal data handling and information security activity to ensure adherence to internal and external policies;

Working with business and support units within the organization to implement the IRM (information risk management) and business continuity strategies and frameworks set by the organization / Management information Security Forum ( MISF) for Firstsource;

Interface with potential and existing customers as a senior management information security and business continuity representative, providing assurance and information as required by the business, marketing, or other teams;

Any other duties are within the scope, spirit, and purpose of the job, the title of the post, and its grading as requested by the line manager or Head of Department/Division.

Serves as an internal information security consultant to the organization. Advises the organization with current information about information security technologies and related regulatory issues

Documents security policies and procedures created by the Information Security Committee

Implements information security policies and procedures for the organization

Reviews all system-related security plans throughout the organization’s network, acting as a liaison to Information Systems

Monitors compliance with information security policies and procedures, referring problems to the appropriate department manager

Coordinates the activities of the Information Security Committee

Monitors the internal control systems to ensure that appropriate access levels are maintained

Protects system by defining access privileges, control structures, and resources.

Recognizes problems by identifying abnormalities; reporting violations.

Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.

Determines security violations and inefficiencies by conducting periodic audits.

Upgrades system by implementing and maintaining security controls.

Keeps users informed by preparing performance reports; communicating system status.

Any other duties are within the scope, spirit, and purpose of the job, the title of the post, and its grading as requested by the line manager or Head of Department/Division.

· Significant broad IT experience, at least some of which has been in a security role

· A good working knowledge of Information Security and SOC1 & SOC2, ISO 27001, PCI DSS, HITRUST, My CSF, GLBA HIPAA principles and practices

· Broad awareness of hardware/software security products

KNOWLEDGE AND SKILLS:

· Excellent written and verbal communication and presentation skills

· Strong analytical and evaluation ability, and problem-solving skills

· Strong interpersonal skills, able to establish credibility at all levels

· Strong persuasion and influencing skills

· Self-motivated team player able to work effectively with diverse client groups and also on own initiative

· Strong planning and organizational skills;

· Flexible and adaptable style;

PREFERRED FIELD-OF-EXPERTISE:

ISO 27001, PCIDSS, HITRUST , SOC2 / SOC 3

Work in Midshifts

Should be Cebu based

Role

Manager-Technical

Timings

Flexible (Home Based)

Industry

BPO

Work Mode

Process

Voice

Functional Area

ITES / BPO / Customer Service

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.

Nkem Nwachukwu

Recruiter - Gratitude Inc

NA, nigeria

0+ Followers

500+ Posts

View Profile

Interview Tips

Giving the VNA round?
What are the most important skills you acquired as a Soft Skills/VNA trainer?
How would you handle an irate customer?

Get the Best Jobs
on your Fingertips

Confidential

Cebu Central Visayas, Philippines

Details