*about it nestlé*
we are a team of it professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition, and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for nestlé’s digital challenges with our consumers, customers and at the workplace. We collaborate with our business partners around the world to deliver standardized, integrated technology products and services to create tangible business value.
In our it security & compliance team we are supporting nestle to improve it security and compliant ways of working. We are shaping the it compliance frame to be in line with external and internal requirements.
You will be responsible to enhance the processes in different it compliance areas like nestlé it standards, data privacy and contract management for 3rd parties and vendors related to it security & compliance expectations.
This role requires a good understanding and collaboration on the one hand internally in our team and on the other hand with other parts of the company from legal team to procurement and audit. Furthermore, you need closely work together with central teams as well as local contacts in the different markets.
To enable this, you will be responsible for supporting the definition and providing the tools, processes, and frameworks to support it risk & control management in nestlé.
*key responsibilities*
- sustain and improve tools and processes to support an integrated risk, compliance & security framework (including regulatory requirements such as data privacy).
- collaborate with audit function to ensure one source of truth through the integration of reporting corrective & preventative actions and audit findings
- advise on and promote importance of related it risk, it compliance and security outside the is/it community especially with legal and procurement teams
- drive root cause analysis of audit results and review documentation to embed improvements in tools and processes by clear definitions in it standards and practice documents
- support risk identification and control mapping for all solutions and processes in it products and other is/it teams using the nestlé security, risk & compliance framework and management system.
*required profile*:
- 5+ years of experience in a combination of it risk management, it compliance, information security, and is/it jobs with good knowledge of complex technology environments
- undergraduate degree in the field of computer science, is/it security, law, quality management; graduate degree in one these fields preferred
- industry-related compliance, risk or security management certification is preferred (e.g., cisa, cism, cissp, iso27001, lead auditor, etc.)
- experience developing and submitting is/it audit and compliance reporting
- direct experience and knowledge of global, regional and local information technology laws, regulations and standards (e.g., gdpr, iso27001, nist, itil etc.)
- general knowledge of business theory, processes, management, budgeting & office operations
- solid understanding of it product management principles desired
- experience with effective communication at different levels in the organization and in english
- experience having worked in a global environment and with virtual teams.