Search by job, company or skills

C

Sr. Analyst, Governance, Risk and Compliance (GRC), Information Security

new job description bg glownew job description bg glownew job description bg svg
  • Posted a day ago
  • Be among the first 10 applicants
Early Applicant

Job Description

Job Description

Are You Ready to Make It Happen at Mondelz International

Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

You work with the information security team as a competent and experienced information security and compliance specialist.

How you will contribute

You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.

What you will bring

A desire to drive your future and accelerate your career. You will bring experience and knowledge in:

  • Information security, compliance and risk management
  • Security solutions and their applicability to Mondelz International
  • Security strategies, awareness campaigns, policies/standards and governance
  • Communicating effectively with technical specialists, leaders and peers
  • Analytical and problem-solving abilities
  • Being a team player by supporting and leading to achieve common goals

More about this role

As an individual contributor, the successful candidate will be proficient at managing risk assessments of both third parties and internal technologies.

In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerability management and configuration management.

Candidate will also demonstrate ability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards.

    What extra ingredients you will bring:

    Risk Management Responsibilities

    • Execute risk assessment testing supporting the Risk Manager.
    • Document risk assessment results.
    • Support Risk Manager in drafting risk assessment reports.
    • Perform administrative management of risk register (additions/editions/deletions, etc).
    • Document risk acceptance/exemptions that have been approved per the program.
    • Manage quarterly/annual review of risk acceptance/exceptions.
    • Manage risk assessment results in relevant dashboards.
    • Document Issues and Remediation activities for all exceptions noted during risk assessments.

    Compliance Responsibilities

    • Perform quarterly compliance assurance testing.
    • Document compliance testing results.
    • Maintain Management Action Plan (MAP) catalog with due dates.
    • Manage monthly audit MAPs. Includes the timely communication of open MAPs an escalation as needed of risks to completing MAPs at their agreed delivery dates.
    • Perform administrative activities in GRC Solution for compliance related activities.
    • Provide administrative support for ad-hoc external audits.
    • Provide administrative support for internal audits.
    • Support compliance program reporting activities.

    Job specific requirements:

    • 3 years in Information Security field, with at least 2 years working in GRC.
    • Experience with GRC tools (e.g., Archer).
    • Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security.
    • Knowledge of security frameworks such as CIS and NIST.
    • Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.

    No Relocation support available

    Business Unit Summary

    At Mondelz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.

    We have a rich portfolio of strong brands globally and locally including many household names such as , and biscuits , and chocolate candy and gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.

    Our 80,000 makers and bakers are located in more than80countries and we sell our products in over150countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.

    Mondelz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.

    Job Type

    Regular

    Information Security

    Technology & Digital

    More Info

    About Company

    Job ID: 142176677