gso - saac - sr. Associate - security assessment and consultingPublicis Re:Sources Global

Company Description
Publicis Re:Sources is the technology and business services backbone of Publicis Groupe.
Publicis Groupe is the 3rd largest communications group worldwide, Leader in digital and Interactive Communication. With activities spanning 104 countries on five continents, Publicis Groupe employs approximately 80,000 professionals. Publicis Groupe offers local and international clients a complete range of communication services.
Job Description
The Senior Associate will ensure that security and compliance concerns within both internal and external initiatives are properly addressed. The Senior Associate will regularly and upon demand meet with internal and external project sponsors and stakeholders, to perform security risk assessments to address security risks. The Senior Associate will document findings, suggest mitigation controls, track security deficiencies, and manage the implementation of suggested mitigations to ensure risks are successfully mitigated.
The responsibilities associated with the position are as below:
Perform Security risk assessments of Projects and Suppliers using security risk assessment methodology.
Suggest administrative, technical and physical security controls to protect sensitive information on project and supplier environments.
Create Control requirements checklist. Perform control testing and prepare report.
Monitor and report compliance to agreed security processes for assigned client projects.
Perform Security risk assessment and Security architecture review of cloud solutions.
Perform gap analysis with respect to contractual and other industry compliance requirements such as ISO27001, HITRUST, PCI DSS, HIPPA etc.
Assist during client audits and visits.
Ensure quality deliverables and client satisfaction.
Serves as a point of contact for client projects, suppliers related to security risk management.
Ensure effective stakeholder engagement both locally and globally.
Cultivates relationships across internal teams and works towards building professional networks.
Builds a positive, transparent, collaborative working environment for the team.
Time management to ensure project or non-project related deliverables are completed in a timely fashion.
Qualifications
Bachelors or Master's degree in IT, science, math, engineering, computers, security or related field.
3-5 years of experience in Risk Management, ISMS, ISO 27001 implementation.
Technical certifications such as CCSP, CISSP, CISA is a plus.
Working knowledge of any off the shelf GRC product will be an advantage.
Excellent verbal and written communication skills a must.
Solid understanding of IT security technologies, and particularly security technologies.
Must have ISO 27001 implementation or auditing experience.
Must be familiar with SIG, SSAE compliance, SOC 1, SOC 2 reports.
Must be familiar with security risk assessment methodology (ISO 27005 a plus) and have experience in performing the same.
Must have rudimentary understanding of compliance requirements such as GDPR, MA 201 CMR 17, PCI DSS requirements, HITRUST, HIPPA and information security best practices.
Strong oral communications and writing skills are a must.
Must be a self-starter with strong organizational skills to enable navigation of the company to identify sponsors, stakeholders and interested parties.
A 'can do' attitude team player who works well under pressure and with dispersed groups, worldwide.
Good communication and presentation skills
Ability to work effectively and collaboratively with stakeholders.
Willingness to work with geographically dispersed teams; may involve working during non-business hours occasionally to accommodate time-zone differences.
Travel: This position will periodically visit other offices; may require domestic or international travel.
Additional Information
Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned.
Publicis Re:Sources Global

Makati City, Metro Manila
Permanent
Full-time