Senior GRC Analyst

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
The successful candidate will be proficient at managing risk assessments of both third parties and internal technologies. In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerability management and configuration management. Candidate will also demonstrate ability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards.
How you will contribute
Risk Management Responsibilities

• Execute risk assessment testing supporting the Risk Manager.
• Document risk assessment results.
• Support Risk Manager in drafting risk assessment reports.
• Perform administrative management of risk register (additions/editions/deletions, etc).
• Document risk acceptance/exemptions that have been approved per the program.
• Manage quarterly/annual review of risk acceptance/exceptions.
• Manage risk assessment results in relevant dashboards.

Compliance Responsibilities

• Perform quarterly compliance assurance testing.
• Document compliance testing results.
• Maintain Management Action Plan (MAP) catalog with due dates.
• Manage monthly audit MAPs. Includes the timely communication of open MAPs an escalation as needed of risks to completing MAPs at their agreed delivery dates.
• Provide administrative support for ad-hoc external audits.
• Support compliance program reporting activities.

Requirements

• 3 years in Information Security field, with at least 2 years working in GRC.
• Experience with GRC tools (e.g., Archer).
• Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security.
• Knowledge of security frameworks such as CIS and NIST.
• Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.

Relocation Support Available?
No Relocation support available
Business Unit Summary
We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!
Our people make all the difference in our succes
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Excited to grow your career?
We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!
IF YOU REQUIRE SUPPORT TO COMPLETE YOUR APPLICATION OR DURING THE INTERVIEW PROCESS, PLEASE CONTACT THE RECRUITER
Job Type
Regular
Information Security
Technology & Digital