Cybersecurity Specialist

This role oversees and is responsible for the implementation, maintenance, and improvement of the Information Security Management System of the local reporting unit ensuring compliance to contractual and regulatory security requirements.

• Implement, maintain, and continuously improve the effectiveness of ISMS within the local reporting unit.
• Support service delivery in preparation for client assessments or industry-specific certification and compliance audits as ISO27001, PCI DSS, SSAE, etc.
• Perform business impact and risk impact analysis and operational security risk assessments.
• Ensure compliance and effectiveness of controls by conducting periodic compliance assessments and internal audits.
• Facilitate the development of corrective action and remediation plans for identified gaps, issues, risks, or vulnerabilities. Ensure that all committed resolutions to audit findings, risks, and security incidents are monitored, reviewed, resolved, and reported on a timely manner.
• Develop consultative relationships with different departments to educate them on Majorel's risk management framework, exception process, and promote adherence to company policies, contractual, and regulatory requirements.
• Engage proactively in business transitions, local projects, and/or initiatives to identify potential compliance and security risks.
• Support the local implementation of global and regional security education, training, and awareness programs.
• Work cross-functionally and represent the Information Security Organization in discussions with different stakeholders and extend assistance to educate relevant users on how to comply with different information security and data protection policies of the company.
• Facilitate the investigation of a potential or actual security breaches, assist in the development and implementation of corrective action plans, research root cause, and document the entire investigation process according to policy/procedure.
• Conducts security incident response training and exercise within the local unit and designated client accounts.
• Support the implement of business continuity processes within the local scope and assist in testing activities.
• Assist with integrating information security policy, standards, contractual, and regulatory compliance requirements into the organization processes.
• Prepare proposals in cooperation with Sr. ISO to improve the security posture of the local reporting unit and bring them to the attention of the management during regular reporting cycles or whenever necessary.
• Liaise with other Majorel functions, including Key and Technical Account Management, Audit, Risk and Compliance, Data Privacy Office, BCM, Security Operations Center, Project Management Office to ensure the risk management process is efficient and effective.
• Fulfill other tasks related to the position as required.

• Easily transition to a fast-paced environment, must be able to learn new concepts quickly that affect the security posture of the company.
• Willingness to work on-call in the event of a security breach or other emergency.
• Perform effectively despite sudden deadlines and changing priorities.
• Proven ability to identify, analyze, and solve problems.
• Resourceful in solving problems and maximizing resources.
• Highly reliable self-starter, self-driven, able to learn on own initiative.
• Strong organizational/planning and project management skills.
• Communicate, present, and negotiate effectively, with a strong command of the English language, both written and oral.
• Excellent record of dependability and reliability.
• Skilled at working with people with diverse backgrounds.
• Collaborate easily with co-workers and work well independently.

• Graduate of Bachelor's Degree in Information Technology, Computer Science, Administration Management, or equivalent.
• Minimum 4 years of progressive professional experience in Information Security compliance, data protection, security audit, and risk management preferably in the BPO industry.
• Familiar with different regulations and standards related to information security and data protection (e.g. ISO27001, PCI DSS, SSAE, COBIT, etc.).
• Preferably a certified information security professional, relevant certifications are CISM, CRISC, CISA, ISO/IEC 27001 Information Security Officer or Lead Auditor, and CISSP.