Operational Risk & Compliance Manager (Cebu)

Gratitude Inc

325 Views

19 hours ago

3-4 Year(s)

₱ 30 - ₱ 40K p.a

Job Description

Key Skills

Analytical Data Protection Data security Information security HIPAA Risk and Complaince

0 candidate(s) have already applied for this Job. Apply now

Designation: Manager

Department: Operational Risk & Compliance (Cebu)

Set-up: Work from Office

Start Date: URGENT/ASAP

Interview Rounds: 3 Personal Interviews + 1 Online Assessment

Salary Budget: Open for Discussion

Education Level: College Graduate of 4-5 year Course (Bachelor’s Degree)

Experience Level: At least 3 years in the RnC field (under BPO set-up)

JOB DESCRIPTION:

· Creating, updating, and disseminating data protection policies;

· Resolving ad hoc queries and issues relating to data protection;

· Identifying data protection and information security issues that need addressing;

· Managing a data protection and information security training program;

· Managing data protection subject access requests;

· Implementing controls for adherence with data protection legislation and relevant codes of practice; Ensuring the company follows all codes of practice in the relevant sector;

· Developing audit standards for personal data handling and information security activity to ensure adherence to internal and external policies;

·

Working with business and support units within the organization to implement the IRM (Information Risk Management) and business continuity strategies and frameworks set by the organization / Management information Security Forum ( MISF) for Firstsource;

Interface with potential and existing customers as a senior management information security and business continuity representative, providing assurance and information as required by the business, marketing, or other teams;

Any other duties are within the scope, spirit, and purpose of the job, the title of the post, and its grading as requested by the line manager or Head of Department/Division.

Serves as an internal information security consultant to the organization. Advises the organization with current information about information security technologies and related regulatory issues

Documents security policies and procedures created by the Information Security Committee

Implements information security policies and procedures for the organization

Reviews all system-related security plans throughout the organization’s network, acting as a liaison to Information Systems

Monitors compliance with information security policies and procedures, referring problems to the appropriate department manager

Coordinates the activities of the Information Security Committee

Monitors the internal control systems to ensure that appropriate access levels are maintained

Protects system by defining access privileges, control structures, and resources.

Recognizes problems by identifying abnormalities; reporting violations.

Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.

Determines security violations and inefficiencies by conducting periodic audits.

Upgrades system by implementing and maintaining security controls.

Keeps users informed by preparing performance reports; communicating system status.

Any other duties are within the scope, spirit, and purpose of the job, the title of the post, and its grading as requested by the line manager or Head of Department/Division.

· Significant broad IT experience, at least some of which has been in a security role

· A good working knowledge of Information Security and SOC1 & SOC2, ISO 27001, PCI DSS, HITRUST, My CSF, GLBA HIPAA principles and practices

· Broad awareness of hardware/software security products

PREFERRED FIELD-OF-EXPERTISE:

ISO 27001, PCIDSS, HITRUST , SOC2 / SOC 3

REQUIRED SKILLS:

Good written and verbal communication skills, problem-solving skills.

Pays attention to detail

Works in collaboration & are result-oriented

Strong numeracy, analytical, and strategy skills

Capacity to work independently and cope with pressure and responsibility

Professional approach to work, integrity, and respect for ethics

Confidence to relate to a range of people and to challenge people when necessary

Work in Midshifts

Should be Cebu based

Role

Manager-Technical

Timings

Day Shift (Permanent)

Industry

BPO

Work Mode

Process

Non-Voice

Functional Area

ITES / BPO / Customer Service

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.

Nkem Nwachukwu

Recruiter - Gratitude Inc

NA, nigeria

0+ Followers

500+ Posts

View Profile

Interview Tips

Giving the VNA round?
What are the most important skills you acquired as a Soft Skills/VNA trainer?
How would you handle an irate customer?

Get the Best Jobs
on your Fingertips

₱ 25 - ₱ 35K p.m

Cebu Central Visayas, Philippines

Details