IS / IT Risk&Compliance Senior Specialist

Nestlé SA; Granada; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Nestlé is seeking a Senior Risk and Compliance Specialist to enhance compliance and security management systems within its IT Marketing and eCommerce stream in Barcelona. The role involves implementing risk frameworks, conducting audits, and collaborating with global teams to ensure compliance with security standards. Ideal candidates will have extensive experience in risk management and relevant qualifications, working in a dynamic and supportive environment.

Servicios

Competitive salary and comprehensive social benefits

Opportunities for personal and professional growth

Hybrid work environment with flexible schemes

Recreational activities like yoga and Zumba

Formación

• 7+ years of experience in risk management, compliance, or information security.
• Industry-related certifications in compliance, risk, or security preferred.
• Experience in conducting and facilitating Risk Assessments.

Responsabilidades

• Implement and improve Risk, Compliance & Security within the management system.
• Support implementation of Compliance Frameworks for new products.
• Lead and coordinate internal and external audits.

Conocimientos

Risk Management

Compliance

Information Security

Communication

Educación

Degree in Computer Science, Law, IT Security, Quality Management, or Business Administration

Descripción del empleo

Press Tab to Move to Skip to Content Link

We are looking for a Senior Risk and Compliance Specialist to join our IT Marketing sales and eCommerce (MSE) stream in Barcelona.

Position Snapshot :

• Type of Contract : Permanent
• Function and Stream : IT Marketing, Sales and eCommerce
• Type of Work : Hybrid
• Work Language : Fluent Business English

The Role :

The Senior Risk and Compliance Specialist will maintain, support, and improve our compliance and security management systems (ISMS) within our product-based organization. This role is part of the transversal Operations team, working closely with the Security Stream and collaborating with Markets as needed.

The security management systems help IT teams globally to identify, document, measure, and address compliance and security requirements, including data protection, privacy, third-party/vendor management, information security, and procurement.

Using a risk-based approach, the specialist will ensure product teams develop appropriate risk treatment plans, verify controls, and collaborate with security teams to provide tools, processes, and frameworks supporting IT Security and Compliance.

What You’ll Do :

• Implement, coach, report on, and improve Risk, Compliance & Security within the Nestlé Compliance and Information Security Management System.
• Support the implementation of Compliance Frameworks for new products, including ISMS RAs, Archer Controls, and Compliance Enabler Network SPOCs.
• Assist in risk identification and controls mapping across solutions and processes in product groups and IT teams, using Nestlé's frameworks and management systems.
• Coach teams in identifying and managing Risk, Compliance & Security gaps, tracking corrective and preventative actions via the risk management system (Archer).
• Monitor security and compliance KPIs and coordinate actions with product groups and IT teams as needed.
• Lead and coordinate internal and external audits and reviews, preparing impacted teams.
• Maintain ISMS documentation and facilitate Risk Assessment exercises following the ISMS framework.
• Act as the security-related ambassador within the stream, serving as the point of contact for security and compliance questions from product groups and IT teams.
• Promote awareness and drive change towards a more productive operational model in security and compliance.

We Offer You :

• Competitive salary and comprehensive social benefits, including a top-tier pension plan, flexible remuneration, health insurance, restaurant card, mobility plan, etc.
• Opportunities for personal and professional growth through ongoing training and career development.
• Hybrid work environment with flexible schemes, modern campus amenities, and a dog-friendly policy.
• Recreational activities like yoga and Zumba, along with volunteering options.

Join our global team of IT professionals at Nestlé, driving innovation and leveraging cutting-edge technologies to seize digital opportunities. Grow in a dynamic, impactful environment, collaborating worldwide to deliver integrated technology solutions!

What Will Make You a Great Fit :

• 7+ years of experience in risk management, compliance, information security, or related IT roles
• Degree in computer science, law, IT Security, Quality Management, or business administration
• Industry-related certifications in compliance, risk, or security are preferred
• Experience in conducting and facilitating Risk Assessments
• Experience with audits (internal and external) and effective audit management
• Proven ability to apply IT knowledge to compliance issues
• Experience preparing IT audit and compliance reports
• Strong communication skills in English at various organizational levels
• Experience working in a global environment with virtual teams

Not a perfect match? Nestlé supports your growth with customized development solutions.

Application Process :

1. Apply via our job portal
2. Submit your CV
3. We will contact suitable candidates
4. Interviews (HR, hiring team, stakeholders)
5. Feedback
6. Offer extension
7. Location checks and pre-onboarding

We are Nestlé, the world's largest food and beverage company, with brands like KitKat, Nescafé, Maggi, and Purina. With about 275,000 employees, we aim to enhance life quality and promote a healthier future. Our values include respect for all and diversity. In 2022, we achieved CHF 94.4 billion in sales, operating 344 factories in 77 countries. Learn more at our website.

We promote diversity in applicants across gender, age, ethnicity, nationality, sexual orientation, social background, religion, and disability.

J-18808-Ljbffr