Concentrix
Manager,Governance,RiskandCompliance
“Manager, Governance, Risk and Compliance at Concentrix. Skills: Governance, Risk and Compliance (GRC), information security risk management, client assurance, audits, assessments, remediation programmes, risk management, governance, executive reporting, client security audits, client assessments, client due diligence, remediation tracking, audit readiness, control failures, emerging risks, compliance gaps, security incidents, root cause analysis, people leadership, stakeholder engagement. Lead i”
Industry & Context.
root cause analysis
What They're Looking For.
Must Have
8–10 years of experience in information security, governance, risk, compliance, audit, or client assurance., Demonstrated experience leading audits, security assessments, and remediation programmes., knowledge of common security and compliance frameworks (e. g. , ISO/IEC 27001, NIST, SOC 2, PCI DSS)., Proven ability to communicate complex risk topics to executive and non‑technical audiences., Experience managing competing priorities across multiple clients, regions, or regulatory environments., Prior people‑management or team‑leadership experience.
Nice to Have
Bachelor’s degree in Information Security, Risk Management, Business, or a related field (or equivalent experience)., Professional certifications such as CISSP, CISM, CISA, CRISC, HCISPP, or IAPP credentials., Experience with GRC tools, audit platforms, or evidence management systems.
What You'll Do.
Lead information security risk management and client assurance activities across multiple client accounts and regions.
and remediation programmes.
Manage and develop a team of GRC Specialists.
Serve as a trusted advisor to internal leaders and client stakeholders.
and client security requirements are met through governance
proactive risk management
and clear executive reporting.
Provide leadership oversight of information security and compliance risk assessments across client programmes and internal functions.
Govern core GRC artefacts
including risk registers
and risk acceptances.
and client security requirements into scalable
auditable control expectations.
Advise senior stakeholders on risk prioritization
and risk‑business trade‑offs.
Complete all assigned
mandatory training within the timeframe provided.
Conduct and/or participate in regularly scheduled 1: 1 meetings with direct manager and/or direct reports.
Act as the senior escalation point for client security audits
and due diligence activities.
Oversee end‑to‑end delivery of client assurance engagements
and on‑time completion.
Review and approve complex or high‑risk client assurance responses and evidence submissions.
Ensure effective governance of client‑driven findings through remediation tracking and executive escalation.
Lead responses to internal and external audits
maintaining audit readiness and consistent narratives.
Establish and oversee proactive monitoring to identify control failures
Provide leadership oversight for security incidents and investigations
ensuring effective root cause analysis and remediation.
Drive systemic improvements to controls
and governance models to prevent recurring issues.
and develop a team of GRC Specialists through performance management
and capability building.
executive‑level risk reporting on posture
and remediation status.
Partner with Client Security leadership
and other stakeholders to ensure aligned priorities and timely execution.
How You'll Work.
Team & Collaboration
Partner with Client Security leadership, IT, Operations, Privacy, Legal, and other stakeholders to ensure aligned priorities and timely execution.
Communication Scope
Proven ability to communicate complex risk topics to executive and non‑technical audiences.; Produce clear, executive‑level risk reporting on posture, trends, and remediation status.
Process & Methodology
remediation programmes, client assurance engagements, remediation tracking
Applying for this Manager, Governance, Risk and Compliance role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Concentrix?
Real rants from real employees. Read before you apply.