LastWeek

LastThreeDays

Today

Aoristou

FullTime

Hybrid

OnSite

Remote

Reporting to theGlobal IT Compliance Lead, asanIT ComplianceManager, the successful candidate will be proficient at managingrisk-basedITcompliance initiatives acrossMondelez.Theroleis keyin the successful deliveryofthe annual Sarbanes-Oxleyinformation technology compliance programandthe operationalization of EU NIS2 Directive requirementsfor all in-scopeapplications and supported technologies.In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerabilitymanagement,and configurationmanagement,among others.Candidatewill alsodemonstrateability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards.&nbsp;How you will contributeAssuranceProgramResponsibilities<ul><li>Conduct assuranceactivities related to theannual SOX Compliance audit with a specific focusofIT General Controlsand Vendor SOX Compliance.</li></ul><ul><li>Lead compliance activities for the NIS2 Directive, including performing initial and recurring gap assessments, remediation tracking, and supply chain security alignment.</li></ul><ul><li>Perform quarterly compliance assurance testingandmaintainaudit-ready evidence documentation.</li></ul><ul><li>Document compliance testingevidence andresultsproviding audit ready assurances.</li></ul><ul><li>Maintain ManagementActionPlan (MAP)catalog with due dates.</li></ul><ul><li>Manage monthly audit ManagementActionPlans(MAPs). Includes thetimelycommunication of openMAPsan escalation as needed of risks to completing MAPs at their agreed delivery dates.</li></ul><ul><li>Perform administrative activities in GRC Solution for compliance related activities.&nbsp;</li></ul><ul><li>Managead-hocexternalITaudits.</li></ul><ul><li>SupportGRC Lead for CTO/CISO focusedinternal audits.</li></ul><ul><li>Managecompliance program reporting activities.</li></ul>Requirements:<ul><li>7 years in one or more of the following fields: Information Security, SOX Compliance, Internal Controls, Internal Audit or GRC,&nbsp;</li></ul><ul><li>3 years leading/managinginternal and external audits (i.e., Sarbanes-Oxley SOX) for a public US company.</li></ul><ul><li>Direct experience with EU cybersecurity regulations, specifically the NIS2 Directive.</li></ul><ul><li>Experience with GRC tools (e.g., Archer).</li></ul><ul><li>ISACA CISA and/or CISM Certifications (significant plus)</li></ul><ul><li>Knowledge of security concepts and methodologies such as risk assessments, risk &amp; controls, policies &amp; standards, enterprise security strategies, network, and cloud security.</li></ul><ul><li>Working knowledge of securityand compliance frameworks such as CIS, NIST and ISO</li></ul><ul><li>Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.</li></ul>

Job Ads Area Manager Greece, Information Technology / It

it compliance manager 166778

Mondelēz International

Jobily.gr

For Employers

For Job Seekers

Company