Systems Security Manager

About the role

The Systems Security Specialist III supports and oversees information security, privacy, governance, risk, and compliance initiatives across global BPO operations. The role identifies security gaps, privacy threats, and process weaknesses; assesses their potential impact; and partners with Account Managers, Directors, and cross-functional teams to develop practical remediation plans. The Specialist also supports audit readiness and evidence collection for PCI DSS 2025 and ISO 27001, conducts operational reviews for client environments, and helps ensure security and privacy controls are applied consistently across assigned regions and business operations.

Key responsibilities

• Ensure that the APAC and Africa regions comply with laws and regulations, policies and procedures that apply to all aspects of operations
• Provide strategic direction to business units of APAC and Africa regions to mitigate compliance risk and ensure that compliance functions are fully integrated and embedded
• Provide assurance over the APAC and Africa regions' compliance management, control and governance processes by developing and executing a Compliance vision and strategy based upon risk and ensuring appropriate audit coverage of the organization's high compliance risks
• Respond to regulators requests for industry submissions to influence changes and represent APAC and Africa regions' interests
• Address non-compliance issues through investigation and risk mitigation, and lead cross functional teams to respond to non-compliance with appropriate remediation
• Provide leadership to make independent decisions on required action in ambiguous situations to mitigate impacts of breaches and protect the organization's brand
• Work with external regulators to address customer concerns, implement required controls in timely manner and be accountable for results
• Develop business unit relationships and solicit input from compliance primes and other sources to develop compliance reports to senior management
• Ensure business units in APAC and Africa regions implement appropriate controls and/or attestation processes to ensure accuracy of reporting

About you

• Demonstrated experience in security compliance, governance, risk management, and controls
• Experience leading or supporting compliance programs across multiple regions or in a global role
• Working knowledge of PCI DSS and ISO 27001 audit and control environments
• Experience with regulatory, privacy, telecommunications, information security, and client contractual requirements is preferred
• Experience in a BPO, outsourcing, or similarly regulated, client-driven operating environment is an advantage
• Proven ability to investigate issues, coordinate cross-functional remediation, and manage competing priorities
• Strong stakeholder management, written communication, and reporting skills
• Ability to exercise sound judgment and make independent decisions in complex or ambiguous situations