Manager, Governance, Risk and Compliance

Responsibilities

• Provide leadership oversight of information security and compliance risk assessments across client programs and internal functions.
• Govern core GRC artifacts, including risk registers, control frameworks, exceptions, and risk acceptances.
• Act as the senior escalation point for client security audits, assessments, and due diligence activities.
• Oversee end-to-end delivery of client assurance engagements to ensure quality and consistency.
• Lead responses to internal and external audits and establish proactive monitoring to identify control failures.
• Lead, coach, and develop a team of GRC Specialists through performance management and mentoring.
• Produce clear, executive-level risk reporting regarding security posture, trends, and remediation status.

Requirements

• 8–10 years of experience in information security, governance, risk, compliance, audit, or client assurance.
• Demonstrated experience leading audits, security assessments, and remediation programs.
• Strong knowledge of common security and compliance frameworks such as ISO/IEC 27001, NIST, SOC 2, or PCI DSS.
• Proven ability to communicate complex risk topics to executive and non-technical audiences.
• Prior people-management or team-leadership experience.
• Experience managing competing priorities across multiple clients, regions, or regulatory environments.

Preferred Qualifications

• Bachelor’s degree in Information Security, Risk Management, Business, or a related field.
• Professional certifications such as CISSP, CISM, CISA, CRISC, HCISPP, or IAPP credentials.
• Experience with GRC tools, audit platforms, or evidence management systems.

About the Company

Concentrix is a global technology and services leader that powers the world’s best brands. We are a solution-focused, tech-powered, and intelligence-fueled partner helping companies transform how they connect, interact, and grow. With operations in over 70 countries, we design, build, and run integrated, end-to-end solutions across the entire enterprise.