Looking for a job

Michael Arciaga

@michaelarciaga

Message

I build global privacy, cybersecurity, and GRC programs that reduce enterprise risk.

Philippines

Message

What I'm looking for

I'm looking to lead GRC, privacy, cybersecurity, or IT operations programs where I can strengthen risk management, regulatory compliance, incident resilience, and cross-functional governance at scale.

I'm leading GRC strategy at Concentrix for a global workforce of 5,000+ FTEs supporting the world’s #1 social media platform. I lead 12 GRC, IT security, and audit professionals while driving risk reduction, audit readiness, and ethical governance.

Previously, I built privacy governance and privacy-by-design programs at EXL and EY, partnering with product, legal, security, and business teams on impact assessments, controls, training, and global regulatory obligations. My work spans GDPR, CCPA, SOC 2, ISO 27001, NIST, privacy incident response, audits, vendor risk, and data subject rights.

Across ING, Harte-Hanks, DTCC, and technology operations roles, I've led data protection, incident response, security operations, and network operations teams. I focus on turning complex privacy and security risks into practical controls, clear executive reporting, and resilient operations.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager – Governance, Risk and Compliance

Current

Concentrix

Jul 2024 - Present (2 years 2 months)

Spearheaded strategic GRC initiatives, leading a team of 12 professionals and ensuring security and compliance for a global workforce of 5,000+ FTEs. Maintained adherence to GDPR, CCPA, SOC 2, ISO 27001, and NIST, and directed incident response and third-party risk management.

GRC Risk Management Compliance GDPR CCPA SOC2 ISO 27001 NIST Audit Incident Response Third Party Risk Vendor Management Data Privacy Cybersecurity Leadership

Senior Manager, Data Privacy | Information and Cybersecurity

EXL

Sep 2023 - May 2024 (8 months)

Provided strategic privacy guidance, conducted Privacy Impact Assessments, and developed privacy standards and training. Managed privacy controls and data subject rights processes across global teams.

Data Privacy Privacy By Design Privacy Impact Assessment Transfer Impact Assessments (TIAs)GDPR Privacy Controls Data Subject Rights Training Stakeholder Management

Senior Data Privacy and Protection Consultant

Aug 2022 - Sep 2023 (1 year 1 month)

Collaborated with product managers to define privacy metrics, reviewed and mitigated privacy risks, and managed internal controls for privacy legal frameworks. Coordinated audits and oversaw the privacy training program.

Data Privacy Privacy Impact Assessment GDPR Internal Controls Audit Training Stakeholder Communication

Security Operations Center Manager

Elevate Philippines Inc

Sep 2021 - Aug 2022 (11 months)

Led the Security Operations Center, overseeing security event monitoring, incident response, and compliance with SLAs. Managed team and vendor relationships, and developed processes to strengthen the security operations framework.

Security Operations Incident Response SIEM Threat Management Threat Modeling SLA Management Team Management Vendor Management Reporting

Data Protection Professional

ING Business Shared Services BV

Jan 2021 - Aug 2021 (7 months)

Developed global data protection standards and drove compliance across the bank. Collaborated with Data Protection Officers and other risk functions to improve data protection maturity and manage stakeholder relationships.

Data Protection GDPR Data Governance Compliance Risk Management Stakeholder Management Training Policy Development

Data Privacy Manager

Harte-Hanks Philippines

Jan 2018 - Dec 2020 (2 years 11 months)

Managed the Data Privacy Office, overseeing privacy controls, breach investigations, and GDPR compliance. Coordinated privacy risk assessments, training, and served as contact point with the National Privacy Commission.

Data Privacy GDPR Privacy Impact Assessment Privacy Breach Investigations Training Risk Assessment Vendor Risk Management Data Subject Rights Compliance

Incident Response Manager, Information Protection and Assurance

The Depository Trust & Clearing Corporation – DTCC Manila

May 2015 - Dec 2017 (2 years 7 months)

Managed a team of global incident managers, coordinating investigations of privacy and confidentiality incidents. Governed the Data Loss Prevention program and reported to senior management on incident status.

Incident Response Data Loss Prevention Privacy Confidentiality GDPR Risk Management Team Management Stakeholder Reporting

Senior Technical Analyst, Network Operations Center

Carlson Wagonlit Travel

May 2014 - May 2015 (1 year)

Provided technical support, managed security groups, and resolved incidents. Key member in a data center build in Las Vegas, managing infrastructure support and establishing new support groups and SLAs.

Network Operations Incident Management ITIL Data Center Server Administration Troubleshooting SLA Management Process Improvement

Manager, Incident Response

TeleTech Holdings ROHQ

Aug 2013 - May 2014 (9 months)

Managed global incidents, overseeing network operations engineers and service desk analysts. Reduced MTTR and coordinated cross-functional teams to resolve high-severity outages.

Incident Management MTTR Reduction Network Operations Service Desk Outage Management ITIL KPI Implementation

NOC Engineer, Network Operations Center

Ring Central

Jun 2012 - Jul 2013 (1 year 1 month)

Monitored network elements and managed incidents in a 7x24 NOC. Performed troubleshooting, escalated issues, and ensured SLAs were met.

Network Operations Incident Management Linux Windows Monitoring Troubleshooting Change Management SLA

Network Engineer, Network Operations Center

BAE Systems Applied Intelligence

Oct 2010 - May 2012 (1 year 7 months)

Installed, configured, and maintained network services and devices. Monitored network connectivity and resolved issues, coordinating with vendors and service providers.