Teleperformance USA Hiring for Audit Analyst at Columbus Full Time

Overview:

Teleperformance is a strategic partner to the world’s leading companies, bringing solutions and enhancing customer experience during each interaction. We are the largest interaction expert team in the market: multicultural, highly skilled, and deeply knowledgeable, with a wide range of integrated omnichannel solutions, technology, and the highest security standards. For us, each interaction needs to be treated as unique.

Responsibilities:

The Lead Compliance and Audit Analyst is responsible for creating, maintaining, improving, and monitoring Teleperformance processes and procedures, and compliance to contractual obligations and policy standards with a particular focus on Information Security. This function ensures that Teleperformance is kept current by staying informed about new legal, regulatory and contractual requirements, incorporating new threats, vulnerabilities, risks, business requirements and other variables that may affect elements of the program, and ensuring that applicable requirements are appropriately addressed. The function also provides Management with status reports on the status of compliance and Information Security within the company.

The Lead Compliance and Audit Analyst is expected to understand client contractual and regulatory requirements and assist process owners in creating proper documentation as required by the many compliance and information security standards, global policies and other information security initiatives. The Lead Compliance and Audit Analyst is expected to be familiar and provide evaluated responses to inquiries and assessments related to Teleperformance information security standards and processes from both potential and existing clients.

The Lead Compliance and Audit Analyst is expected to create and implement an internal assessment plan to ensure alignment to Teleperformance policy and contractual compliance requirements. The successful candidate will be acting as the compliance point of contact within Teleperformance related to process and procedures documentation.

The Lead Compliance and Audit Analyst coordinates and manages information security compliance by developing internal assessment plan, managing information security audits and acting as the security point of contact for both internal groups and external clients, supervise the day to day aspects associated with implementation of the security program, policies, and procedures, and guides the team in assessing the adequacy of internal controls, and documentation. This function will also be key in facilitating periodic risk assessment and testing, tracking and monitoring of internal controls.

The successful candidate will have strong communication skills, and be capable of coordinating with a geographically disperse group of professionals. In this role, the Lead Compliance and Audit Analyst will communicate security compliance requirements, security concepts, policies, standards, procedures, and provide ongoing support.

The successful candidate will have a firm understanding of compliance and audit, risk management principles and is able to easily articulate that understanding while helping others to improve. Is willing to actively seek opportunities to develop new approaches to meet new goals. Grasps and applies advanced concepts. Stays abreast of new tools, technologies, and techniques, and implements them as solutions to business and technical problems.

Responsibilities also include:

• Manage overall audit and compliance program for Teleperformance

• Develop, track and monitor status of Compliance and Audit team initiatives and projects

• Develop, track and monitor Compliance and Audit security metrics

• Align current business processes with client requirements and external security standards/obligations, such as NIST, FISM, PUB1075, ISO 27001:2013, PCI-DSS, HIPAA/HITRUST, etc., as well as Service Organization Control reporting

• Identify, document and assist in the remediation of security deficiencies and gaps with business suitable controls

• Collect and review control evidence

• Works with security team in the creation of policies, procedures, or guidelines to ensure the security and privacy of information and computer systems for Teleperformance.

• Review Statements of Work, Master Service Agreements, and other contracts for security obligations and identify areas of exposure

• Serve as liaison between internal and external customers and management to maximize the adoption of and support for security plans and procedures within the organization.

• Serve as a liaison between the organization’s clients and security auditors, concerning information security

• Identify and lead the appropriate subject matter experts to participate in the identification and analysis of risk scenarios

• Participate in BCP/DR related activities

• Completes all special projects and other duties as assigned.

Qualifications:

A Bachelor’s degree in computer science, engineering or a related discipline, or the equivalent combination of education, technical training or work/military experience.

• S. citizen or Green Card holder AND legal U.S. resident for previous 10-years

• 5+ years of Information Security/Risk Management/Compliance experience

• Experience with regulatory requirements including, but not limited PCI-DSS, ISO27001:2013, HIPAA/HITRUST, etc.

• Experience with government regulatory requirements including, but not limited to NIST, FISMA, and PUB1075

• Experience with Service Organization Control Reporting (SOC1 Type 2 and SOC2 Type 2)

• Advanced knowledge and work experience in Compliance and Audit, Risk Management or related fields, such as Audit, IT Security, or Business Continuity, however other IT disciplines are eligible

• Technical knowledge to understand detailed issues around security, business continuity and overall risk in IT

• Able to have enough expertise to drive a solution and solve issues, addressing risk.

• Demonstrated strategist with analytical capabilities in regards to risk, controls, and trending

• Strong personal and professional ethical values and impeccable integrity

• A self-starter with a high degree of confidence, and a conviction and ability to defend his/her plans and programs. Be able to gain the confidence and respect of the company, soliciting their ideas and suggestions.

• Must be an intelligent, highly organized, articulate, professional and persuasive leader who can serve as an effective member of the security team and appropriately represent security with Executive Management and is able to communicate information security compliance related concepts to a broad range of technical and non-technical staff including internal and external stake holders.

Preferred Skills

• Strong communication and documentation skills are highly preferred

• Experience in a regulated (financial, pharmaceutical, health care, etc.) industry is highly desired.

• One or more of the following certifications is highly preferred: CISA, CRISC, CISM, CISSP