IT Compliance Manager

Mondelēz International•Town of Greece, NY

3d•Onsite

About The Position

Reporting to the Global IT Compliance Lead, as an IT Compliance Manager, the successful candidate will be proficient at managing risk-based IT compliance initiatives across Mondelez. The role is key in the successful delivery of the annual Sarbanes-Oxley information technology compliance program and the operationalization of EU NIS2 Directive requirements for all in-scope applications and supported technologies. In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerability management, and configuration management, among others. Candidate will also demonstrate ability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards.

Requirements

7 years in one or more of the following fields: Information Security, SOX Compliance, Internal Controls, Internal Audit or GRC
3 years leading/managing internal and external audits (i.e., Sarbanes-Oxley SOX) for a public US company.
Direct experience with EU cybersecurity regulations, specifically the NIS2 Directive.
Experience with GRC tools (e.g., Archer).
Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security.
Working knowledge of security and compliance frameworks such as CIS, NIST and ISO
Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.

Nice To Haves

ISACA CISA and/or CISM Certifications (significant plus)

Responsibilities

Conduct assurance activities related to the annual SOX Compliance audit with a specific focus of IT General Controls and Vendor SOX Compliance.
Lead compliance activities for the NIS2 Directive, including performing initial and recurring gap assessments, remediation tracking, and supply chain security alignment.
Perform quarterly compliance assurance testing and maintain audit-ready evidence documentation.
Document compliance testing evidence and results providing audit ready assurances.
Maintain Management Action Plan (MAP) catalog with due dates.
Manage monthly audit Management Action Plans (MAPs). Includes the timely communication of open MAPs an escalation as needed of risks to completing MAPs at their agreed delivery dates.
Perform administrative activities in GRC Solution for compliance related activities.
Manage ad-hoc external IT audits.
Support GRC Lead for CTO/CISO focused internal audits.
Manage compliance program reporting activities.