Senior Information Security Engineer
Senior Information Security Engineer
TTEC is a pioneer in customer experience, engagement and growth solutions. Our 60,000+ employees serve customers in more than 80 countries and 50 languages across social, mobile, and digital channels. We utilize a holistic approach, applying solutions to help companies provide an amazing experience to their customers, inspire customer loyalty, and grow their business. Our employees live by a set of customer-focused values that guide relationships with clients, their customers and each other.
The CSA Team handles key functional and compliance processes at the intersection of information security, supplier/vendor security and risk management. This includes supporting new sale/client opportunities including Requests for Information (RFIs) and Requests for Production (RFPs), client/supplier assurance audits and assessments, and related information security and risk management functions.
The Sr. Information Security Engineer will perform a variety of support functions involving information security, compliance and supplier management. The Sr. Information Security Engineer will need to be a self-motivated individual, comfortable working independently and as part of a larger group, and possess strong oral and written communication skills in the English language. The role necessitates a high level of organizational and time management ability. Operating cooperatively and professionally with internal/external stakeholders is essential.
What You’ll Do
The Information Security Engineer will be responsible for the following duties:
-
Strong knowledge base and comprehension in current information security controls/safeguards and industry compliance framework regulations and standards (e.g. PCI DSS, SOC 1 and SOC 2 Type II, ISO 27001/2, HIPPA, HITRUST, GDPR). Applying this knowledge with the Company’s security policies and best practices when performing new sale opportunity security and compliance assessments and supplier security and risk assessment reviews.
-
Ability to prioritize projects and be a multi-tasker.
-
Comprehension and affective communicator on Company’s Global Information Security, Privacy and Compliance policies and Company processes.
-
Knowledge of networks and operating systems while adjusting them according to our business environment.
-
Interact frequently with Information Security, and other members of the IT technology teams, IT and Client Operations, quick learner and comprehension.
-
Company systems, networks, Information Security requirements and communicating how they need to be applied and how they work.
-
Lead security and compliance support for Sales Solution and Proposal Management’s Request For Information (RFI) and Request For Proposal (RFP) for new client opportunities. Able to market and leverage the Company’s Global Information Security, Compliance and Risk model to assist in winning bids.
-
Ability to provide information security, technical and industry compliance advice, guidance, and recommendations, to Sales Solution and Proposal management, Global Sourcing and other technical specialists on critical information security and industry compliance risks and threats.
-
Able to immediately identify current and potential Company security and compliance risks and threats, engage appropriate internal departments and collaborate with teams on remediation efforts.
-
Perform third-party supplier due diligence as part of company's process for using new suppliers to perform services or shares data with a supplier.
-
Consult with internal team to understand the risks of supplier and how these risk could impact the Company’s risk level.
-
Review supplier submitted security questionnaires and assess compliance with company's requirements.
-
Provide solutions and alternate solutions the correlate to Company security and privacy policies and processes.
What You Bring to the Role
-
Minimum 7+ years of experience in Information Security.
-
Minim