Job Description

It started with one ridiculously good idea - Create a different breed of BPO! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion; exploring new technologies, being ready to handle any challenge in a moment’s notice, mastering consistency in an ever-changing world – that’s what it takes to get there. If that's something you want to be apart of, apply today!
This role requires hands-on experience with security risks and assessment, especially with specific security programs. You must be able to solve challenging security issues at scale and work collaboratively with all stakeholders. Additionally, you should be comfortable with incomplete requirements and a fast paced environment.
Responsibilities:

• 
  You will review the responses and escalate any findings to the Management for review
• 
  Findings from vendors and/or system owners will need to be documented and tracked for remediation
• 
  You will need to determine risks to the systems and data and determine when to escalate for review
• 
  Conducting Risk Assessments and other Risk Management related activities
• 
  Support the Enterprise Security Lead in handling the assessment and integration of security controls of the entire corporate environment in line with applicable requirements from PCI , SOC 2, HIPAA, ISO 27001 etc.
• 
  Send out security assessments to identified vendors and Internal System Owners

• 
  Follow up with vendors and Internal System Owners to ensure assessments are completed by the due date outlined
• 
  Review vendor security assessments to determine if the security requirements are being met
• 
  Review Internal Control assessments to determine if the policy requirements are being met
• 
  Follow up with vendors and/or system owners for clarification on assessment responses and for additional information needed to complete the assessment review
• 
  Document and triage findings from vendors on security responses
• 
  Collaborate with internal stakeholders on assessments, including identification of findings and associated remediation plans.
• 
  Consult with internal stakeholders on security standards and best practices to protect the data and systems
• 
  Follow up with internal stakeholders and vendors on remediation to ensure security risks are tracked and closed
• 
  Escalate issues regarding findings to internal stakeholders for review

Requirements:

• 
  At least 2 to 4 years of experience specifically in IT Security role
• 
  With hands-on experience in:
  • 
    GRC (Governance, Risk and Compliance)
  • 
    Assessment tools: OneTrust, RSA Archer, Prevalent, ProcessUnity)
  • 
    Risk/Compliance Framework: PCI, HIPAA, NIST, SOC2 T2, ISO27001, COBIT)
• 
  Exceptional verbal and written communication skills necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge.
• 
  Bachelor's degree in IT Security, Computer Science, or equivalent; or an additional 4 years of relevant IT experience.

About Us
We are a collective of highly capable humans, who understand how to deploy technology and data to best serve your purpose. From Digital CX to Content Security, AI Operations, Consulting, and anything in between, we consider ourselves responsible for protecting our partners’ interests and supporting their long term success through innovation and technology -powered by ridiculously smart people.
TaskUs partners with the world’s most innovative and disruptive brands to protect what matters most and to thrive in an ever-changing world.
TaskUs currently has over 23,000 employees around the world with offices across the United States, the Philippines, India, Taiwan, Mexico, Greece, and Ireland.
TaskUs is an equal opportunity employer.
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
TaskUs is an Equal Opportunity Employer