Cyber and Digital Security Senior Specialist

Make a virtual tour inside Nestlé in Italy

Position Snapshot

 

• Headquarters of Nestlé in Milan, Italy;
• IT Security and Compliance Department;
• Permanent contract;
• Full-time work in a global environment;
• Master or Bachelor’s degree in Business administration, Technology-related field or equivalent;
• 8+ years of experience in a combination of risk management, information security and IT jobs; 
• Experience in effective communication at different levels in the organization and in English.

 

Position Summary

 

As a Cyber and Digital Security Senior Specialist, you will play a central role in establishing and maintaining security products, platforms and solutions designed to mitigate IT risks across Nestlé Group to ensure that information assets are adequately protected. You will be responsible for the identification, evaluation and reporting of information security risks in a manner that meets compliance and regulatory requirements, aligning with and supporting the risk posture of the enterprise.

 

Our new team member will proactively work with IT and business units to implement practices that meet defined policies and standards for information security. Acting as a security business partner for the IT Product Groups, you will represent IT Security in various core team meetings.

 

The Cyber and Digital Security Specialist continuously researches and stays on top of emerging security threats, technologies and trends.

 

A day in the life of...

 

• Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices.
• Work directly with Product Managers, BRMs and IT Customers to facilitate business IT risk assessment and risk management processes, and work with stakeholders through the enterprise on identifying acceptable levels of residual risk.
• Create a framework for roles and responsibi.lities with regard to information ownership, classification, accountability and protection.
• Provide strategic risk guidance for IT projects and product management, including the evaluation and recommendation of technical controls.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or to eliminate risk and audit findings.
• Understand and interact with related disciplines to ensure the consistent application of policies and standards across all product groups; technology projects and systems, including, but not limited to, privacy, risk management, compliance and business continuity management.
• Work closely with Enterprise Architects, other functional area architects and other Security Specialists to ensure adequate security solutions are in place throughout all IS/IT products and platforms to mitigate identified risks sufficiently and to meet business objectives and regulatory requirements.
• Serve as a security expert in infrastructure design and deployment, database design, network and/or platform (operating system) efforts, helping product teams comply with enterprise and IT security policies, industry regulations and best practices.

 

What will make you successful

 

• Degree in business administration or a technology-related field, or equivalent work experience
• 8+ years of experience in a combination of risk management, information security and IT jobs 
• Experience in complex enterprise environments and current technology areas like cloud and mobility
• Hands-on experience with Azure and/or AWS and/or GCP related to administration, security, deployment, management and automation technologies
• Practical experience on infrastructure network security (i.e. data centers, security gateways, VPN, on prem and in the cloud)
• Practical Experience on operating systems security (Linux and/or Windows)
• Experience on databases security (SQL, Oracle, NoSQL, HANA DB etc) 
• Previous work experience in a global environment and with virtual teams will be considered an asset
• Knowledge and understanding of relevant legal and regulatory requirements, General Data Protection Regulation (GDPR), Payment Card Industry/Data Security Standard (PCI) or relevant local or global laws, standards and regulations
• Professional security ma