Platform Engineer, IAM Identity Gov. & Admin.

Mondelēz International; España; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Mondelēz International seeks an experienced information security and compliance specialist in Spain to assess risks, implement cyber security technology, and support information security across IT assets. You will work under the global information security lead, manage third-party providers, and deliver security training to teams.

Key responsibilities include designing SailPoint IIQ workflows, running access certifications, and aligning IAM with major standards while providing audit-ready

Formación

• Knowledge of information security, compliance and risk management.
• Understanding of security solutions and their applicability to enterprise IT.
• Experience with security policies, standards and governance frameworks.
• Strong communication with technical and business stakeholders.

Responsabilidades

• Assess information security risks per policy and best practices.
• Implement cyber security tech and provide day-to-day support.
• Manage third-party providers to ensure standards compliance.
• Deliver information security training to relevant teams.
• Design, develop and deploy SailPoint IdentityIQ workflows and RBAC/ABAC models.
• Act as operational SME for IIQ across environments and handle health, upgrades and changes.
• Run access certification campaigns and SoD reviews using risk-based approaches.
• Enhance joiner/mover/leaver workflows and timely de-provisioning.
• Lead role mining, entitlement rationalisation and privileged access governance.
• Ensure IAM aligns with SOX, GDPR, HIPAA, PCI-DSS, NIST 800-53, ISO 27001; produce audit-ready reports.
• Build integrations: ServiceNow/Jira, SIEM/SOAR, multi-cloud IAM (AWS/Azure/GCP).
• Collaborate with application owners, HR, IT Security and business to drive adoption and KPIs.

Conocimientos

Information security

Compliance and risk management

Security strategy & governance

Communication

Analytical & problem solving

Team collaboration

Descripción del empleo

Job Description

Are You Ready to Make It Happen at Mondelēz International?

Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

You work with the information security team as a competent and experienced information security and compliance specialist.

How You Will Contribute

You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day‑to‑day business support. If relevant to your role, you will manage third‑party providers to ensure that any internal or third‑party adhere to standards. You will also provide information security training to appropriate teams.

What You Will Bring

• Information security, compliance and risk management
• Security solutions and their applicability to Mondelēz International
• Security strategies, awareness campaigns, policies/standards and governance
• Communicating effectively with technical specialists, leaders and peers
• Analytical and problem‑solving abilities
• Being a team player by supporting and leading to achieve common goals

In this role, that means:

• Designing, developing and deploying SailPoint IdentityIQ solutions - workflows, rules, custom connectors (JDBC, SCIM, REST, LDAP) and RBAC/ABAC/PBAC access models
• Acting as the primary operational SME for the IIQ platform across all environments: platform health, aggregation and provisioning issues, root cause analysis, upgrades and change control under ITIL/ITSM
• Running access certification campaigns - manager, entitlement owner, micro‑certification and SoD reviews - using risk‑based strategies and AI‑driven recommendations
• Enhancing automated Joiner, Mover and Leaver workflows, from birthright provisioning through to timely de‑provisioning and orphan account cleanup
• Leading role mining, role engineering and entitlement rationalisation to keep the access model clean and access requests simple
• Governing privileged access through PAM integration, SoD enforcement and Just‑In‑Time provisioning
• Keeping IGA processes aligned to SOX, GDPR, HIPAA, PCI-DSS, NIST 800‑53 and ISO 27001, with audit‑ready reporting and evidence
• Building integrations that scale - ServiceNow/Jira for access request fulfilment, SIEM/SOAR for ITDR, and multi‑cloud IAM (AWS, Azure, GCP)
• Partnering with application owners, HR, IT Security and the business to drive adoption, and presenting the KPIs that show platform maturity

What Will Give You a Competitive Edge

SailPoint Identity Security Cloud and IIQ-to-ISC migration planning; ITDR concepts and tooling; CyberArk PAM integration; cloud permission governance across AWS, Azure and GCP; ServiceNow ITSM integration; AI/ML in identity analytics and outlier detection; identity data governance; and Non‑Human Identity governance (service accounts, API keys, bot identities).

Make It Uniquely Yours.

Relocation Support Available?

No Relocation support available

Business Unit Summary

We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions.

Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Job Type

• Regular
• Information Security
• Technology & Digital