IT at Nestlé Hiring for Sr Specialist IT Compliance Job at Saint Louis, MO Full Time

Nestlé Information Technology is the digital arm of the world’s largest nutrition, health, and wellness company. With 150+ years in business, 2,000+ brands, and 270,000+ diverse team members—you’re joining an organization that’s revolutionizing food and championing global humanitarian efforts with technology at its core.

Joining Nestlé IT means you’ll never stop learning and sharpening new skills. Tools, technologies, and innovation for the next generation of food is part of it. Working with team members from different cultures and corners of the world on truly meaningful initiatives is what makes our work inspiring. Think beyond technology. Feel like you belong. Join a Force for Good.

We are a team of professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé’s digital challenges with our consumers, customers and at the workplace. We collaborate with our business partners around the world to deliver products and services to create tangible business value.

This position is not eligible for Visa Sponsorship.

As a Sr. Specialist IT Compliance, you’ll be part of the IT Security and Compliance team acting as the point of contact for IT Compliance to drive Business and IT questions to a compliant solution in line with IT S&C and all regulatory requirements. You’ll be responsible for ensuring Privacy & Regulatory IT Compliance across the organization, as well as PCI requirements. Also, you will be the expert supporting the definition of processes, the tools, and frameworks for IT Risk & Compliance Management in Nestlé.

This is a REMOTE position.

• Supports risk identification and controls mapping for solutions and processes in product and product groups and other IT teams using the Nestlé Security, Risk & Compliance framework and management system
• Responsible for conducting controls testing, management system reviews, and reporting to assess the IT compliance and management system
• Supports all IT teams in identifying and applying Internal and External (legal, regulatory, and commercial) compliance requirements with a focus on PCI requirements
• Implements tools and processes to support an integrated Risk, Compliance & Security Framework (including regulatory requirements GDPR, CCPA etc.)
• Coaches and supports teams in managing Risk, Compliance & Security gaps through documented corrective and preventative actions tracked through the management system
• Implements and sustains processes with Legal, Quality, and Corporate Compliance to ensure IT teams are able to identify and apply internal and external (legal, regulatory, and commercial) compliance requirements
• Maintains and develops tools and processes to support contract reviews and security annex definitions and negotiations
• Collaborate with Audit, IT & NBE support functions to ensure one source of truth through integration of reporting corrective & preventative actions and audit findings
• Maintain the management system through continuous review and evaluation of external frameworks and standards (e.g., ISO27001, COBIT, NIST, ITIL etc.)
• Validate root causes that have been addressed prior to closure of corrective & preventative actions
• Support IT teams in the execution and follow-up of Partner Compliance Audits (including cloud)

REQUIREMENTS

• 7+ years of experience in a combination of risk management, compliance, information security, and IT jobs
• 2+ years of PCI-DSS QSA or ISA auditor experience
• Undergraduate degree in the field of computer science, law, IT Security, Quality Management, or business administration
• 1+ years of experience in Data Privacy and related laws
• Basic knowledge of Contract management, IT Compliance (Policies, Standards and Guidelines) and Knowledge of ISMS (ISO 27001)

OTHER

• Industry-related compliance, risk, or security management certification preferred
• Experience in IT audit and compliance reporting preferred
• Legal knowledge – laws beyond the US, like GDPR preferred
• Experience with Microsoft Office tools, Power BI, and Power Automate preferred

REQUISITION ID:
220107

It is our business imperative to remain a very inclusive workplace.

To our veterans and separated service members, you’re at the forefront of our minds as we recruit top talent to join Nestlé. The skills you’ve gained while serving our country, such as flexibility, agility, and leadership, are much like the skills that will make you successful in this role. In addition, with our commitment to an inclusive work environment, we recognize the exceptional engagement and innovation displayed by individuals with disabilities. Nestlé seeks such skilled and qualified individuals to share our mission where you’ll join a cohort of others who have chosen to call Nestlé home.

The Nestlé Companies are an equal employment opportunity and affirmative action employer seeking diversity in qualified applicants for employment. All applicants will receive consideration for employment without regard to race, ethnicity, color, gender, gender identity, age, religion, national origin, ancestry, disability, perceived disability, medical condition, genetic information, veteran status, sexual orientation, or any other protected status, as defined by applicable law. Prior to the next step in the recruiting process, we welcome you to inform us confidentially if you may require any special accommodations in order to participate fully in our recruitment experience. Contact us at [email protected] or please dial 711 and provide this number to the operator: 1-800-321-6467.

This position is not eligible for Visa Sponsorship.