IT Compliance Specialist

Nestlé S.A.; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Flexible work policies with core hours

Work-from-home options

Career and personal development

Smart office locations

Inclusive international environment

Job summary

Nestlé S.A. is seeking an IS/IT Compliance Specialist to join the Nespresso Digital and Tech Team in a hybrid role. The role focuses on ensuring adherence to information security policies and regulatory standards across markets, supporting risk-based decisions, and guiding teams through ISMS processes.

The ideal candidate has 2+ years in IT risk and compliance, a relevant bachelor's degree, and strong communication skills to collaborate with business and IT teams globally.

Qualifications

• Bachelor's degree in IT security, risk and compliance or a related field.
• 2+ years of expertise in IT Risk and Compliance.
• Knowledge of data protection laws (GDPR/CCPA) and PCI-DSS.
• Strong analytical and problem-solving skills to assess risks and propose actions.
• Excellent verbal and written communication to convey concepts across audiences.

Responsibilities

• Ensure compliance with applicable laws, regulations, and Nestlé internal policies including data protection.
• Conduct reviews of management systems and third-party SaaS control assessments to identify gaps and risks.
• Coach teams to address risk and compliance gaps through corrective and preventative actions.
• Support training initiatives on security and compliance policies and best practices.
• Assist in implementing and maintaining the ISMS aligned with policies and regulatory standards.

Skills

IT risk & compliance

Data protection & privacy

Analytical thinking

Documentation & reporting

Cross-functional collaboration

Education

Bachelor's degree in IT security/risk & compliance

Job description

We are looking for a IS/IT Compliance Specialist to be part of our Nestlé Nespresso Digital and Tech Team. At Nespresso, our Digital & Tech teams are at the heart of our innovation journey, a space where we continue to invest, evolve, and grow.

Position Snapshot

• Type of Contract: Permanent
• Grade: Band 2
• Type of work: Hybrid
• Work Language: Fluent Business English

The Role

The primary responsibility of the Compliance Specialist is to ensure adherence to Nespresso and Nestlé Information Security policies and IT regulatory standards.

By supporting the implementation of integrated risk, compliance, and security management systems in alignment with the business risk appetite, the Compliance Specialist will provide essential knowledge to aid in the design of solutions, contractual agreements, and necessary controls.

The Compliance Specialist's responsibilities include assisting teams in navigating their risk, compliance, and security requirements through Nestlé's Information Security Management System (ISMS) to ensure that products and platforms are compliant and secure, meeting the business risk appetite. This role involves collaborating with business and IT teams across various Nespresso markets to educate them on the tools, processes, and frameworks necessary for ensuring compliance with internal standards and external regulations.

In This Role, You Will

• Ensure compliance with relevant laws, regulations, and internal policies and standards, including data protection and privacy laws, to protect organizational integrity.
• Conduct management system reviews, including control assessments for third-party SaaS solutions, to identify and report compliance gaps and potential risks in business operations and IT systems.
• Coach teams in effectively managing risk and compliance gaps through documented corrective and preventative actions.
• Support training initiatives for employees on security and compliance policies, procedures, and best practices to foster a culture of compliance within the organization.
• Assist in the implementation of various compliance initiatives and help manage the Nespresso Information Security Management System (ISMS) to ensure alignment with organizational policies and regulatory standards.

What We're Looking For

• Bachelor's degree, related to Information Technology security, risk and compliance
• 2+ years of expertise in IT Risk and Compliance
• Familiarity with relevant laws and regulations, including data protection laws (e.g., GDPR, CCPA), PCI-DSS, and industry-specific compliance standards.
• Strong analytical and problem-solving skills, with the ability to assess compliance risks and recommend appropriate actions.
• Excellent verbal and written communication skills, with the ability to effectively convey compliance concepts to diverse audiences and work collaboratively across cross-functional teams.
• High level of attention to detail and accuracy in documentation and reporting.

Extra Skills That Set You Apart

• Relevant certifications (e.g., CISA - Certified Information Systems Auditor)
• Knowledge of data privacy regulations (such as GDPR and CCPA) and ISO 27001 standards, ensuring effective compliance and risk management practices

We Offer You

We offer more than just a job. We put people first and inspire you to become the best version of yourself.

• Flexible work policiesincluding core hours and options for working from home. Discuss with us during the recruitment process to understand what flexibility could look like for you!
• Genuine opportunities for career and personal developmentthrough ongoing training and constant career opportunities reflecting our conviction that people are our most important asset.
• Modern "smart office" locationsproviding agile workspaces. Our state-of-the-art campus is equipped with areas to co-create, network, and chill!
• International, dynamic & inclusive working environmentwith attractive additional benefits.
• The pride to work for a B Corp certified companyand one of the world’s most trusted brands.

About Nespresso

TheNespressostory began with a simple but revolutionary idea: enable anyone to create the perfect cup of espresso coffee.

Since 1986,Nespressohas redefined and revolutionized the way millions of people enjoy their coffee.

We are a Company committed with the Climate change and we aim to achieve carbon neutrality as soon as possible and net-zero GHG emissions by 2050 at the latest.

In 2019 we created the digital hub in Barcelona to offer the best customer experience and innovation to B2C and B2B channels.

We encourage the diversity of applicants across gender, age, ethnicity, nationality, sexual orientation, social background, religion or belief and disability.

People are at the heart of our success - all 14,000 of them. We actively cultivate diversity, inclusion and belonging in the workplace. We celebrate individuality, believing that your authenticity and uniqueness can help us to grow and thrive together

Step outside your comfort zone; share your ideas, way of thinking and working to make a difference to the world, every single day. You own a piece of the action - make it count.