IT Security and Compliance Analyst

City, York
Randstad Delivery

IT Security and Compliance Analyst

York – Hybrid (2-3 days per week on-site)

12 months

Main Purpose:

Provide Security & Compliance support to the NiM businesses and IT incl. relevant contribution to agreed IT support model, operational sustain incl. incident and request management, Market Security Compliance Indicator (MSCI) measure and Information Security Managment (ISMS) contribution.

Key Outputs:

• Sustain the IT product portfolio, across all UKI NiM (Nestle in the Market) businesses, by providing first level support, incorporating the Service Portal and subject matter experts, to agreed targets and SLO, ensuring Compliance by following relevant GLOBE Standards and Policies, incl. Nestl IT Security Policy and Cyber Securirty Awareness
• Supporting the Security & Compliance Specialists with ownership or support of relevant MSCI measures and ISMS controls
• Providing support to the Market Role Coordinator for GLOBE SAP Security sustain and projects
• Supporting the application compliance process and governance framework for solution onboarding. Specifically supporting facilitation of the Control Decision Tree, application controls and supporting IT application owners to supply adequate evidence whilst providing guidance on required remediation.
• Sustaining the IT Software Asset Management Standard, with specific support where required (incl. supporting SAM Service Functional Owners, compliance evidence, ensuring SAM compliant process and behaviours)
• Maintain knowledge in key areas of Security & Compliance to ensure cross-skilling and sufficient cover for team members
• Supporting the IT and business to ensure we are ‘In Control’ inc. IT Standards & controls

Key Relationships External to Nestle Group:

• External Auditors when requested (e.g. Ernst & Young)
• External suppliers as needed (e.g. SAP, HP etc.)
• Work with external customers and vendors to ensure compliance

Main Purpose of Job:

• Some experience of IT Security and Compliance (incl. MSCI and ISMS)
• Evidence of delivering results
• Good working knowledge of IS/IT systems & processes
• Experience and knowledge of Audits and Risk Assessments
• Good understanding of key IS/IT Security policies
• Good understanding of all IT Security & Compliance Standards (incl. RISE, Cloud, Digital etc.)
• Ability to deliver training or Present to employees

Knowledge:

• Core knowledge of the 10 Nestl Corporate Business Principles and expert knowledge in our areas of responsibility.
• Good understanding of the Nestl UKI NiM business.
• Basic knowledge of inter-relationship of NiM businesses, key functions and their key priorities.
• Good knowledge of Nestl Management and Leadership Principles.
• Good understanding of IIRM (Interaction, Incident & Request Management Best Practice)
• Effective prioritisation (Able to assess impact on a Business impacting incident and prioritise accordingly)
• Good Knowledge of Nestl IT Security & Compliance standard requirements (End User Security, RISE, Cloud & own subject matter compliance requirements)

Randstad Business Support is acting as an Employment Business in relation to this vacancy.