Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
Reporting to the Global IT Compliance Lead, as an IT Compliance Manager, the successful candidate will be proficient at managing risk-based IT compliance initiatives across Mondelez. The role is key in the successful delivery of the annual Sarbanes-Oxley information technology compliance program and the operationalization of EU NIS2 Directive requirements for all in-scope applications and supported technologies. In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerability management, and configuration management, among others. Candidate will also demonstrate ability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards.
How you will contribute
Assurance Program Responsibilities
- Conduct assurance activities related to the annual SOX Compliance audit with a specific focus of IT General Controls and Vendor SOX Compliance.
- Lead compliance activities for the NIS2 Directive, including performing initial and recurring gap assessments, remediation tracking, and supply chain security alignment.
- Perform quarterly compliance assurance testing and maintain audit-ready evidence documentation.
- Document compliance testing evidence and results providing audit ready assurances.
- Maintain Management Action Plan (MAP) catalog with due dates.
- Manage monthly audit Management Action Plans (MAPs). Includes the timely communication of open MAPs an escalation as needed of risks to completing MAPs at their agreed delivery dates.
- Perform administrative activities in GRC Solution for compliance related activities.
- Manage ad-hoc external IT audits.
- Support GRC Lead for CTO/CISO focused internal audits.
- Manage compliance program reporting activities.
Requirements:
- 7 years in one or more of the following fields: Information Security, SOX Compliance, Internal Controls, Internal Audit or GRC,
- 3 years leading/managing internal and external audits (i.e., Sarbanes-Oxley SOX) for a public US company.
- Direct experience with EU cybersecurity regulations, specifically the NIS2 Directive.
- Experience with GRC tools (e.g., Archer).
- ISACA CISA and/or CISM Certifications (significant plus)
- Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security.
- Working knowledge of security and compliance frameworks such as CIS, NIST and ISO
- Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.
More about this role
Travel requirements:
25%
No Relocation support available
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Information Security
Technology & Digital
What We Do
Mondelēz International, Inc. (NASDAQ: MDLZ) is an American multinational confectionery, food, and beverage company based in Illinois which employs approximately 90,000 individuals around the world. Our Purpose Our purpose is to empower people to snack right. We will lead the future of snacking around the world by offering the right snack, for the right moment, made the right way. Our Brands We’re leading the future of snacking with iconic brands such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. Our People Our 90,000+ colleagues around the world are key to the success of our business. Our Values and Leadership Commitments of Love our Consumers and Brands, Grow Every Day, and Do What's Right shapes our culture – what we believe in, stand for, and what guides our actions and decisions. Great people and great brands. That’s who we are. Our Strategies We are uniquely positioned to lead the future of snacking with strong leadership in our categories, an unparalleled portfolio of global and local brands, and a solid footprint in fast-growing markets. Aimed at delivering sustainable growth, our strategic plan is centered around three strategic priorities: • Growth: accelerate consumer-centric growth • Execution: drive operational excellence • Culture: build a winning growth culture
Why Work With Us
We offer passionate, energetic and curious people a huge choice of careers in our fun, fast-paced, global business. We operate in four regions: Asia, Middle East & Africa; Europe; Latin America; and North America. And in over 80 countries our people are united in a common purpose to empower people to snack right.
Gallery
Mondelēz International Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
#TeamMDLZ Flexible Working Pledge: We Trust each other to work flexibly and productively We show Empathy, encouraging belonging and connection We are Mindful of making space and taking time
