Systems Security Manager

Systems Security Manager

Department: Information Security / Risk and Compliance

Work Arrangement: Hybrid; onsite attendance as required

Schedule: Must be willing to work night and rotational shifts based on business needs

Travel: Must be capable of traveling as needed

Regional Scope: APAC and Africa regions

Office Site: Vertis North

Reports to: Director of Security Compliance

Position Summary

The Systems Security Manager leads security and regulatory compliance across the APAC and Africa regions. The role provides strategic direction, oversight, and assurance to business units, helping ensure that compliance requirements are understood, embedded in operations, and supported by effective controls.

In a business process outsourcing (BPO) environment, the manager works across client-facing and internal operations to address requirements involving privacy, telecommunications, information security, contractual obligations, and applicable laws and regulations. The role also supports audit readiness, investigates compliance issues, coordinates remediation, and communicates risk and compliance performance to senior management.

Key Responsibilities

• Responsible in ensuring that the APAC and Africa regions complies with laws and regulations, policies and procedures that apply to all aspects of its operation.
• Responsible for providing strategic direction to business units of APAC and Africa regions to mitigate compliance risk and to ensure that compliance functions are fully integrated and embedded.
• Provides assurance over the APAC and Africa regions' compliance management, control and governance processes to the Director of Security Compliance and Senior Management by developing and executing a Compliance vision and strategy based upon risk and ensuring appropriate audit coverage of the organization’s high compliance risks. (Includes compliance in the areas of privacy, telecom, security, client contractual security regulations and as required with changing laws/regulations & contracts.)
• Responds to regulators requests for industry submissions to influence changes and represent APAC and Africa regions' interests.
• Addresses non-compliance issues through investigation and risk mitigation, as well as, where required, lead cross functional teams to respond to non-compliance with appropriate remediation.
• Provides leadership to make independent decisions on required action in ambiguous situations to mitigate impacts of breaches and protect the organization’s brand.
• Works with external regulators to address customer concerns, implements required controls in timely manner and be accountable for results.
• Develops business unit relationships and solicits input from compliance primes and other sources to develop compliance reports to senior management.
• Ensures business units in APAC and Africa regions implement appropriate controls and/or attestation processes to ensure accuracy of reporting.

Qualifications and Experience

• Demonstrated experience in security compliance, governance, risk management, and controls.
• Experience leading or supporting compliance programs across multiple regions or in a global role.
• Working knowledge of PCI DSS and ISO 27001 audit and control environments.
• Experience with regulatory, privacy, telecommunications, information security, and client contractual requirements is preferred.
• Experience in a BPO, outsourcing, or similarly regulated, client-driven operating environment is an advantage.
• Proven ability to investigate issues, coordinate cross-functional remediation, and manage competing priorities.
• Strong stakeholder management, written communication, and reporting skills.
• Ability to exercise sound judgment and make independent decisions in complex or ambiguous situations.

Work Requirements

• Hybrid work arrangement, with onsite reporting as required.
• Availability for night and rotational shifts based on business needs.
• Willingness and ability to travel as required.